Comment by kanobi

I think in practice, what ends up happening, is that small businesses don't really bother to comply while they fly under the radar. Or they just end up buying an e-commerce plugin that handles the minimum. We had one for GDPR and then they just added support for CCPA when that was a thing.