3 ms·
> Easy peasy unless your system was built before it became illegal to "haphazardly" process PII. - GDPR-like legislation existed in most EU countries waaaaaay
by dmitriid 4y ago
> Easy peasy unless your system was built before it became illegal to "haphazardly" process PII.
- GDPR-like legislation existed in most EU countries waaaaaay before GDPR.
- It was known for years that GDPR is coming.
- GDPR specifically gave companies two years after going in effect to get their act in order.
- We are now 4 years after GDPR went in effect.
If you're still complaining that it's "a drakonian law that doesn't let your company do haphazard PII processing aka collecting PII wholesale with no consent", then you company deserves to be sued and fined out of existence.
- orwin 4y agoAnd the watchdogs are helpful. At my previous company, they basically spend 2 man-day (10 hour hands on deck) helping us drafting a compliant architecture document.