Hacker News Reader

That's the case for most, if not all, of the new European regulations, such as the Digital Markets Act. The number of companies to which it applies can be counted on your hands, and they all have tens of billions of dollars of revenue.

Each country may have its own regulations though, which makes it difficult, because not all of them are threshold based.

I don't think safely handling data subject's data for example is something that should start only from a certain size.

Let's only make the small bridges unsafe?

Like the gatekeeper designation in the DMA, or the threshold for assigning a data privacy officer in GDPR, you mean?