New EU data laws may spare small businesses