Obviously everyone would much prefer the former. GDPR is a very bad law for many reasons, but rendering many basic IT strategies for robustness "illegal" (maybe

Obviously everyone would much prefer the former. GDPR is a very bad law for many reasons, but rendering many basic IT strategies for robustness "illegal" (maybe) is one of them. Of course GDPR defenders tend to take a stance of, anything reasonable is actually not illegal under GDPR even if it might appear to be so at first. It really is a horribly vague and useless piece of law making. I really hope the UK scraps it after Brexit, though I don't hold out much hope.