Hacker News Reader

Not at all, smaller players would be exempt. Only if the service becomes massive enough and starts to police their users with secret courts in this way do they get treated like a utility.

> smaller players would be exempt

Yesterday we had the discussion on FCC rules, and CE marking, from which small players are not exempt. There's no reason to assume there would be de minimis exemptions, there aren't for the GDPR.

So be it. From a user perspective it doesn't matter if a big company or a small company is abusing custody of user data.

I don't see the harm for start ups to think about their user's rights early on. Better it becomes part of their Startup DNA than having to learn it later and adopt their company.