For example: https://advisera.com/articles/list-of-mandatory-documents-required-by-eu-gdpr/ Every company that stores personal data (hair dresser, restaurant (table reservations)) needs to have this. Including paperwork with your vendors (like Microsoft, Google etc.) - how much influence you as small business have to get that done in the right way?
Comments
Sure, you can send it formless. However better you have a process in place.
I'd encourage you to do your research before you just say things. Ideology doesn't always help. Sorry that I broke the news to you, that GDPR was lobbied by big tech.
I think our common ground is: data privacy is cruicial. That we can both agree on. But lets disagree on the quality of GDPR legislation.