Best Startup Response to GDPR

This seems very much like the way most Americans view laws, and "complying" with them. This is not the way the European Union law is written, nor how they view compliance.

Nudge, nudge, wink, wink will not work as well as he hopes here, making this far from the best startup response. It's also possible that he's doing a good enough job on privacy that nobody will raise a GDPR complaint against the site, but that doesn't mean this response should be emulated.

Title is highly editorializing