You realistically don’t need to do anything at all. It’s just spite at this point.
Julian Assange and Kim Dotcom and myriad less famous individuals will be relieved to hear it.
Says the guy frantically moving goalposts. :)
If you do collect personal data, with permission, it's only slightly more complicated. Let the individuals control their data, including deletion. Don't do anything with it without permission. Again, not hard to understand.
The "morass" is for people who are gonna try anyway. "Well, what about if we bury the permission under exhausting legalese?" No, that's unlawful. "What if we collect it but obfuscate it?" Not without permission. Etc.
So, "compliance morass" is not an argument. It's an extremely simple law.