The point of the law is to protect EU citizens, not support business.
Lamenting about the fate of small businesses is getting tiresome, especially when said businesses are one dime a dozen startups whose ultimate goal on their wonderful journey is to get sold and make the founders rich.
The problem with this thought is that small businesses help EU citizens, and making it harder for the businesses to do that means the EU citizens are indeed being harmed.
All that assuming GDPR actually does harm businesses, which is definitely debatable. I just don't think "fuck businesses" is the right stance to take, because it doesn't account for the benefits businesses provide to their customers.