Work for a fairly large company and we've been working on GDPR since like last October. There is a lot of ambiguity on unstructured data that we don't parse/pro

Work for a fairly large company and we've been working on GDPR since like last October. There is a lot of ambiguity on unstructured data that we don't parse/process (things like customer uploaded images, pdfs, etc) that seem to be confusing for product management and/or legal. If a customer uploads an image or PDF and it's got a second customer's protection information in it, how am I supposed to know? It's just sitting in an s3 bucket without any introspection...