For small businesses that don't have a large mess of legacy stuff to clean up, the requirements aren't that bad. Yes, it is extra effort, but mostly documentation, and lots of it can be minimized by keeping as little data as necessary.