I don't see the harm for start ups to think about their user's rights early on. Better it becomes part of their Startup DNA than having to learn it later and adopt their company.
Not at all, smaller players would be exempt. Only if the service becomes massive enough and starts to police their users with secret courts in this way do they get treated like a utility.
Yesterday we had the discussion on FCC rules, and CE marking, from which small players are not exempt. There's no reason to assume there would be de minimis exemptions, there aren't for the GDPR.
