GDPR compliance is expensive to implement correctly. It's more about data regulation than privacy. It hurts small startup firms who don't have the resources or time, and rewards large companies that do.
It was and is much more expensive for the big companies and established players.
Only use the data that you need, and you’re 90% GDPR compliant. The other 10% is making sure that you can delete data.
If your startup relies on sending private data to hundreds of ad agencies and trackers, for example, it’s a good thing your startup struggles.
It's really not unless your business model involves selling data.
We don't sell data, We make things which we sell to people.
GDPR was a pain in that it was work we didn't previously have to do but it wasn't hard to comply with.
FWIW I'm completely in favour of it as well, it's about damn time.