Ok, so you're describing (IMO) exactly what's in the text of the GDPR. Here is a "plain english" translation of the GDPR that makes much of this more evident:

Ok, so you're describing (IMO) exactly what's in the text of the GDPR. Here is a "plain english" translation of the GDPR that makes much of this more evident: https://blog.varonis.com/gdpr-requirements-list-in-plain-english/ https://blog.varonis.com/gdpr-requirements-list-in-plain-eng... If you dig into it, I think you'll find it lines up nicely with what you are suggesting.