> GDPR compliance can be extremely expensive to implement, especially for complex software comprised of thousands of microservices that handle customer data. And imagine working in an industry where data retention is legally mandated by other jurisdictions...

I only know of the broad strokes of GDPR, but wouldn't the costs be mostly mitigated if one just decided to not collect data? I thought the cost was really only borne if an entity decided to collect and retain data.