Data protection and innovation are not mutually exclusive, according to researchers. They are calling for targeted relief measures for smaller businesses.