Smaller organisations and companies are finding it difficult to meet the demands of the new law and face hefty fines if they get it wrong.