I plan to completely ignore GDPR laws and will not modify neither my privacy policy not my SaaS product, even if I have a lot of customers from the EU.
I do care about privacy - I don't use Analytics on my website, don't show any ads, don't send marketing emails and don't sell customer data to anyone. However, I will not comply with that bureaucratic law, because the EU will not be able to enforce it in my country and I have much more important things to do to stay competitive on the market (I have a lot of competitors).
Do you send user data anywhere in a way users may not expect? If not there's probably nothing to comply with. It's really the opposite of bureaucratic law — the entire thing is quite readable and reasonable.
While I find your stance somewhat childish, I applaud you for "don't use Analytics on my website, don't show any ads, don't send marketing emails and don't sell customer data to anyone".
You're far ahead of the curve. May you profit from it somehow.
Because he's lazy and thinks he'll get away with it. He'll come into compliance after penalties outweigh the costs of changing the way he does business. This is probably the reaction of the vast majority of folks dealing with customer data, and not at all unexpected — they have a business to run, and costs to customer privacy are an externality being rolled into their costs via regulation.
Also, this is one of the sane solution if he know he has not that much user data. First fines will not be high or won't happen at all, and he will receive advice and even help from regulatory instances if he is ever reported.
If every business owner commenting those GDPR post on HN could act the same and not like headless chicken, discussions would be more healthy.
Because when the EU catches on, they will have funds in the EU (including customer or advertiser payments) seized, they will probably not be able to travel to the EU without fear of arrest, etc.
I think you're just grandstanding, since I hope anyone with a sufficiently large business would understand who and where their customers are and what laws would affect their revenue streams.