2. Depends on what your business is. A company heavily reliant on profiled advertising will have much higher costs than the typical small business with minimal (or no) advertising.

The small business (perhaps with a mailing list and a database of previous customers and invoices) should have been compliant with the earlier laws (Data Protection etc), and the changes required for them are often minor.