>First of all, any such regulation is a regressive tax on small businesses.
your first argument is that it harms small businesses
it's really not an issue to set up laws such that small businesses do not have to follow them. the DMA is a perfect example
your second argument is that there are privacy implications
okay then require the data to be anonymised