Realistically if you're a small company, you just do it, until someone tells you "hey you're supposed to comply with X" and then you say "oh sorry, we didn't realise, we'll do that now", repeat for all X. Programmers think the written law is a description of what actually happens - it's not.
reply