Small startups might not think the world’s strictest data privacy laws apply to them, but it’s important to enact best data management practices before a legal situation arises.