> Not every firm has the resources or know-how to do all that The upcoming EU Data Protection law (GDPR) has fines for data protection breeches. It can be up €

> Not every firm has the resources or know-how to do all that The upcoming EU Data Protection law (GDPR) has fines for data protection breeches. It can be up €20 million or 4% of global revenue. And NGOs can sue you on behalf of affected people. When there's a price tag on non-compliance, suddenly it becomes easier to justify allocating resources to doing it (or paying someone else to tell you how to do it).