A lot of sensible regulation provides escape hatches for smaller companies to avoid the huge costs of compliance. The exception is where there should be absolutely no exceptions, like medical regulation or privacy.