> I don't know why others are mentioning a DPO. You won't need a DPO.

After reviewing those parts of GDPR a bit more, I agree. I was thinking of the EU rep for businesses outside the USA.

> The easiest route to compliance is to not collect Personal Data.

The product I am working on has a social aspect. That said, nothing - particularly the data the GDPR defines as sensitive - would be collected without explicit consent from the users. Actually, nothing is really collected without their opt-in.

> As a solo founder, don't worry about it.

Thanks for chiming in! It is good to hear from someone in a similar situation.