>The rules are such that it is practically impossibly to comply; it is then left to the powers-that-be to decide which ones of those in breach are investigated

>The rules are such that it is practically impossibly to comply; it is then left to the powers-that-be to decide which ones of those in breach are investigated and prosecuted. I'd not say they are impossible to comply at all, coming from a company extremely heavily impacted by the GDPR, with multiple divisions loosely connected (hence harder to ensure forgetfulness) and a lot of customer interaction. I do consider GDPR a very good tool/means to enforce some thought and discipline during development process.