3 ms·
GDPR is not merely a list of bad things not to do. You aren’t compliant unless you follow slow, expensive processes to continually demonstrate compliance.
by erik_seaberg 5y ago
GDPR is not merely a list of bad things not to do. You aren’t compliant unless you follow slow, expensive processes to continually demonstrate compliance.
- Sebb767 5y agoI'd really love to see a quote on the section you're referring to. The GPDR has some processes for larger companies (i.e. DPOs), but they're neither expensive nor slow, and small companies have a lot more leeway.
- erik_seaberg 5y agoThe most egregious I know of is https://gdpr-info.eu/art-36-gdpr/ https://gdpr-info.eu/art-36-gdpr/, which calls for an 8–14 week delay that may or may not apply to any launch. I don’t even think the entire EU must agree on what the conditions will be. Apart from “a natural person in the course of a purely personal or household activity” I don’t know of any size exemptions.