> The end effect of those Bizantine regulations is that big companies just use them as loopholes while small businesses get weighted down with them.

Yeah, this is exactly the issue.

I work in Finance and the right to be forgotten / right to deletion is a pain, as it doesn't apply to invoices (needed for financial reporting for 10 years), but can apply to the user ID, etc. which makes it tricky. It's doable in a big company though, even if it's a headache.

But for example, I live in a housing co-operative, and there the laws really become a pain. Like we wanted to use the CCTV to better enforce treatment of communal areas, but you can't without a police report, etc., and we wanted to build a better portal for residents but then there are lots of issues with the GDPR, etc. - like all just little hurdles that get in the way of iteration and innovation. Especially for something like that which is basically part-time among residents.