> If it takes longer you are building a business around personal data, and I think you should know your stuff (not just GDPR, but also what kind of data you are collecting and why).
And you should probably pause and ask whether your proposed business will provide a net benefit to the world, or if it's just an attempt to make money regardless of the consequences to society.
Not to say there aren't any worthwhile businesses to be created around personal data, but experience suggests that some skepticism is in order.