> The amount of inaction you’d need to be guaranteed to comply with the GDPR would be equivalent to never starting a business at all.
Tell that to GitHub for instance: https://github.blog/2020-12-17-no-cookie-for-you/
Tell that to GitHub for instance: https://github.blog/2020-12-17-no-cookie-for-you/
Edit: In addition with AI act and its very broad definition of what an AI is and a classification like "Education" you might end up in level "highest risk" just for calculating statistics on your quiz app (no one knows until a court rules). With Cyber Resilience Act and its application of the (physical) supply chain direction, your open source repo from 5 years ago might end up being a footgun with you being personally accountable for other companies using it in their product. And so on...
And for a startup it's trivial to comply with GDPR because:
- you start from scratch, so you know not to collect more data than you need
- you don't need that much data to begin with