It actually is a problem for small businesses, especially start ups. Not agreeing with the approach but the GDPR law is extremely complicated to find your way around - talking from experience. Support the idea, implementation could be better.