My employer, https://shadow.cat/ https://shadow.cat/ is offering GDPR compliance consultancy, and so far the take away has been "if you're a non-tech company, i

My employer, https://shadow.cat/ https://shadow.cat/ is offering GDPR compliance consultancy, and so far the take away has been "if you're a non-tech company, it's not honestly that hard" plus "if you're a tech company, it's only hard if your entire business model is built around exploiting your customers' data". If it costs 7 figures to hire consultants, either your business model was parasitic in the first place or your consultants are attempting to fleece you. (if you don't believe me, email mdk@shadowcat.co.uk and ask - I run the tech team, I'm not nearly as much of an expert on the rules as he is - and if you're emailing him to ask with no intention to pay us anything, that's fine, just make sure to blame me)