The EU has strict food labelling laws[1]. They stop companies making stupid claims like "100% asbestos free!", or claiming to be a health food when a major indi

The EU has strict food labelling laws[1]. They stop companies making stupid claims like "100% asbestos free!", or claiming to be a health food when a major indicator is way out of line with guidelines. I think marketing in general could learn something from that. Screen out ridiculous claims that have no basis on the viability on the product, and force people to focus on product and deviances from industry "standard". For example, your transport layer might be using the same ciphers and key length as a military installation, but if Maureen in accounts can log in from home with the username and password she's used on every site since 2002 and access 400,000 customer details, and download them to an unencrypted file on a personal computer... You're not meeting GDPR obligations, let alone military or banking standards. ... And by tangential extension, I think non-developers might be surprised just how many companies still have absolutely zero effective access control to data. No storage encryption. No plans to warehouse or delete old data. Just records in a database (or shared spreadsheet) where a username and password, and sometimes just network access, will give you PII for every customer in the last 20 years. [1]: https://ec.europa.eu/food/safety/labelling_nutrition/claims/nutrition_claims_en https://ec.europa.eu/food/safety/labelling_nutrition/claims/...