It's not that big a burden - just have an officer and don't collect certain types of data without the user's consent. If you can't do that minimal amount of effort and either ensure the user's privacy, or get the user's consent, then you shouldn't be in the business.

It's like complaining about how new credit card businesses or banks can't just start up but need a load of compliancy. That was tried with cryptocurrencies and billions of user's monies was lost due to poor security and scummy companies.

You really don’t think having a data protection officer (even if not a dedicated one) isn’t a significant burden to a tiny business?

Like who?

Seriously. Besides that one blogger who was screaming because he didn't even want to bother with the help wordpress provided, I did not hear of a single person/company that quit because of that.

It would also be quite embarrassing considering the time you had to prepare, the help that is all over now or the fact that nobody seems to enforce it. Especially for businesses.

Here you go: https://www.theguardian.com/technology/2018/may/24/sites-blo...

First hit from a google search for “GDPR shut down”.

> Unroll.me, an inbox management firm, announced it was completely withdrawing services for EU companies due to an inability to offer its product – which is monetised by selling insights gleaned from reading users’ emails

Dodged a bullet here.

- history.com forwards to their german page history.de as it always did

- Ragnarok Online is working: https://www.ragnarokeurope.com/?lang=de

- Klout sounds just as dirty as unroll

- Super Monday Night Combat is working https://www.uberent.com/smnc/

Sooo what's the problem again?

The discussion culture here is disgusting.

I get downvotes for FACTS? Seriously people?

I've read that many times here, but it's weird because I don't know any. None of my neighbours, clients or partners have had any significant problems with GDPR, in a kinda large tech complex in France (with about 300 startups, though of course I don't interact with all of them).

Maybe you mostly have relations with startups that work in the ad industry?

In France, the CNIL did already enforce constrains on data management. The GDPR could be seen has an enhancement of current constrains/laws.

Why would they give up specifically because of GDPR? It just makes no sense, there's thousands of regulations already on all the parts of the day-to-day life of running a business, I wonder how they planned to manage the rest of them.

Seriously. The Data Protection Directive alone already included most of the GDPR.

Not even going as far as IT, just labour laws are already 10x more complex and difficult to follow compared to GDPR.

Except that companies that don’t employ anyone in the EU don’t have to follow EU labor laws.

Really? Because I haven’t heard of any, and I live and work here. Any sources?

They are young single founders in the idea or mvc stage. So nobody that is mentioned by any sources.

I’m a little surprised then, because the only problem I see for basic GDPR compliance for a single founder is if their business model is based on monetising their users’ data. Which is going to be a problem, regardless of the size of the organisation.

It took me 2 hours to get my family member's small web business GDPR compliant...

Are you sure it’s really compliant? Are you willing to risk the possibility of huge fines if you’re wrong?

Sounds like you need better friends.

The only way GDPR could kill a business in the conception stage is if the business model was to secretly collect user data and sell it for profit. A business that can't get started due to GDPR is a business that never deserved to exist.