Hiya. If I may, a couple more things to add to considerations... Firstly while, rightly, you concentrate on the design impact of article 17. I guess most of

Hiya. If I may, a couple more things to add to considerations... Firstly while, rightly, you concentrate on the design impact of article 17. I guess most of you live and work in the US. What that almost certainly means, if you deliver SAAS, is that personal data is exported from the EU for use. You guys really need to understand GDPR Chap 5, articles 44 to 50 inclusive and get hold of something called "treaty 108" which is about the idea of "adequacy". And secondly, I am going to ask someone I know who is a legal eagle to sign up to this site. She is very clever and knows this stuff backwards. She also has an aspiration to come and work in the US....