SSCrazy, don't believe everything you hear about big business in America.  There are criticism's of businesses large and small and that is as it should be.  But business's, at least the one's that don't work primarily on Government contracts, only remain in business by providing products or services that people want enough to voluntarily spend the money they earn.  When a breach happens the effect on the value and revenue of the business is typically huge as is the effect on the executives that let it happen.  Go review Target.  Every "big business" over here and most medium and small businesses are working to comply with GDPR already.  Yes, sometimes tech people don't get all the money they would like to enhanced security.  But many tech people want to do EVERYTHING possible no mater the cost and then bitch if they don't get everything they want. More laws are not the best solution in my opinion.  Already just a little under 1/2 of the economy and therefor power is in the hands of politicians who have to be perfectly alright spending other peoples money, and now future generations money, on what they think is right.  More importantly on things that keep them in power.  In the mean time big companies still manage to produce some amazing things even while being castigated by politicians whose purpose is to drum up more support for more laws to get more power.  It is absolutely not "government of the people. by big business, for big business."  Regardless of what you hear.