Pretty much every company has to fight with it. Hire lawyers, change software, implement "cookie banners" etc.
The craziest part is that the GDPR has a competitive disadvantage for European companies built in: European companies have to show cookie banners even for users outside of the EU. While non-European companies only have to do so for users in the EU.
> Pretty much every company has to fight with it. Hire lawyers, change machines, implement "dangerous waste disposal" etc.
> The craziest part is that environmental protection has a competitive disadvantage for companies built in: Companies have to demonstrate their pollution prevention even for users outside of the EU. While non-European companies only have to do so for users in the EU.
Analogy aside, no company has to show any banners, you just have to respect your users rights to privacy. All companies may use as many cookies as they want as long as they're strictly necessary for the sites operation.
"just have to respect your users rights to privacy" is easier said than done. I don't know a single startup that can say for sure they are GDPR compliant. It's not just "don't use Google fonts". It's really hard questions like "Do we have to replace all our non-EU infrastructure like our CDN, our payment provider, the SaaS services we use with new infrastructure ran by companies in the EU? How do we find those? Do they even exist? Do they work well for non-EU users? Are they compliant? How do we check?".