[closewith]

GDPR doesn't have any minimum size before applying. There's a household exemption for personal use, but if you have one external user, you're regulated.

[henryfjordan]

Thanks for clarifying. I was thinking of the CCPA which does have some revenue or user count minimums.