@dee
I'm just reading through the act and, frankly, I think that *every* company is going to consider it too onerous to comply with. The expansiveness of the scope even captures Github and such ffs. Although it regularly mentions businesses, giving a possibility that only limited companies might be targets, it's not clarified further. "[T]he size and capacity of the provider of the service" is mentioned many times though in determining actions, so an individual would be treated differently to Meta, for example. The £18MM figure though remains the scare tactic. (I've been bankrupt and wouldn't recommend it), This law may have good intentions but it is a blunderbuss instead of sensibly targeted all in the name of "won't someone think of the children". Gah!
I'm so sorry you've found yourself in this position, it must really suck that your 28+ years of work comes to an end in this awful way.