One I have actually dealt with was VATMOSS. Especially when first introduced it had very low ceilings for registration and actually deterred small businesses from trading across borders.
I also think GDPR is too strict for small businesses and non-profits and not strict enough to deal with big businesses that trade data.