I'm all for it, but also acutely aware of the burden this brings.

Just like GDPR, mega corps will have no problems building out these processes and complying.

Small and mid size companies? Good luck to you all.