2 ms·
I’m talking about a data protection officer bottleneck, keeping records of all processing, impact assessments, and waiting on prior consultation with government
by erik_seaberg 6y ago
I’m talking about a data protection officer bottleneck, keeping records of all processing, impact assessments, and waiting on prior consultation with government. Those are all ongoing costs and schedule risks that hurt even teams that have always complied. “Don’t track people” won’t save you from these.
- GordonS 6y agoThis particular thread was about small businesses, and the things you have listed exist only in large businesses. I would also add that they also existed before the GDPR.
- erik_seaberg 6y agoThere’s an exemption for “a natural person in the course of a purely personal or household activity” but I haven’t see any size cutoffs below which an organization can ignore GDPR process friction. 20M EUR fines are explicitly allowed no matter how low your revenue is.