Updating privacy policies is necessary but not sufficient. GDPR has explicit requirements for what a privacy policy must contain, as part of the Right to Transp

Updating privacy policies is necessary but not sufficient. GDPR has explicit requirements for what a privacy policy must contain, as part of the Right to Transparency. I'll also say that most of the privacy policy emails I've gotten are from companies that probably don't have to change much of what they're doing except for documenting things more. I.e. online services that I pay for, as opposed to websites that try to monetize me. It's the latter category that will have to adapt much more than the former.