> Read this to see more from the small company side and how much of a mess it is: > https://www.brentozar.com/archive/2017/12/gdpr-stopped-selling-stuff-europe

> Read this to see more from the small company side and how much of a mess it is: > https://www.brentozar.com/archive/2017/12/gdpr-stopped-selling-stuff-europe/ https://www.brentozar.com/archive/2017/12/gdpr-stopped-selli... I read his post, and wonder if the 'attorneys' he consulted are specialists in EU law, or were his standard ones. There's a lot of FUD around GDPR but the guidance is getting better, and people assume it's being 'policed' when the UK's body (the ICO) is more about guiding into best practices than punishment. The comments (esp around medical records) suggest ignorance of how it's working. Source: reading the GDPR and accompanying notes from the ICO; discussions with a large company's GDPR advisor, who was involved in drafting the legislation. Disclaimer: this is not legal advice, I am not a lawyer, and you are an idiot if you act on anything I say.