re: but if the cost of compliance means too many headaches, it may, as they say, not be worth it. That's why the phrase "strangled by red tape."
The trouble is that the US is starting from a very low base, so GDPR will be causing headaches as it seems to be requiring a level of thinking and compliance not previously required in corporate America.
It is not clear whether GDPR actually increases compliance workload (ie. the administration and paperwork that is associated with being "strangled by red tape" or it simply requires a different way of thinking about personal data; once you've adopted that viewpoint, there is little appreciable difference. However, if currently, you do very little or no compliance, you may perceive compliance as being strangled by red tape...
Biting the hand that feeds IT
