Earlier quoted context omitted.
> EU is about to enforce GDPR [...] if European legislation is more supportive for small agile companies Surely you see the contradiction there. > Currently internet is very U.S. centric because most of the big players are located there. That could change if [...] That's not just a coincidence and I don't believe it's any kind of first-mover advantage. It's about the environment in which you operate and passing more…
Not necessarily a contradiction - GDPR could have many possible effects; it's too early to claim that these effects will disproportionately harm small companies. One possibility, of course, is that larger companies will have more resources to tackle GDPR compliance, and thus be better able to respond effectively than small companies. However, it's also possible that, by taking privacy / security seriously from day on…
It's not too early to claim that the risks are disproportionate. Those of us with small companies really just count on subjective enforcement. Sadly, it seems everyone says "do nothing wrong, nothing to worry about" with these kinds of laws and don't understand risk management or the cost of conformance.