yep, I work at what is a processor in terms of the GPDR and made a action plan of how we should comply and help our customers to comply. Guess how much of that got done? Absolutely nothing. But of luckely we have quarterly meetings to how to improve out compliance etc, of which we have so far had none.

The trouble is that the industry seems to focus more on what they can get away with then what they need to change. Even the GPDR consultants/privacy lawyers focus not on what is required by law, but on how to circumvent as much of it as possible.

All 'BeCAUse iT Is sUcH a drACOnian LaW' - Well guess why that is the case. We keep perverting it in the name of marketing. It's just a race to the bottom in the end.