> As far as the GDPR not being “hard”. It’s 11 chapters with 99 sections. Yet, the guiding principles are clear as day, just like the ten commandments. (Don't

> As far as the GDPR not being “hard”. It’s 11 chapters with 99 sections. Yet, the guiding principles are clear as day, just like the ten commandments. (Don't collect personal data without consent, store it responsibly, allow users to introspect data about themselves and remove it and you shouldn't need to worry.[1]) And it also only becomes a real problem when someone wants to get away with breaking both the spirit and the wording of the law. [1]: And yes, I'm aware that this is mostly incompatible with the practice of hoovering up all you can get, selling it to everyone who wants to buy and generally abusing it for fun and profit in every conceivable way, but that isn't the fault of the law but a problem that companies who habe grown addicted to now antiquated business models have to brought on themselves, isn't it?