If GDPR killed a startup it probably wasn't something worth keeping. Being compliant is sooo easy for small companies, it's mostly just about not being a dick about privacy.

And I have no idea why you thought bringing this up was relevant.