8 ms·Doesn't GDPR already require that companies restrict and document who accesses PII?by OnlyOneCannolo 6y agoDoesn't GDPR already require that companies restrict and document who accesses PII?