There has been sweeping changes in log management, data export to outside entities, reliance on third party providers to parse that data and come up with insigh

There has been sweeping changes in log management, data export to outside entities, reliance on third party providers to parse that data and come up with insights etc. Pre-GDPR, you'd open your logs to any random company promising to come up with something that could remotely help your marketing department. Nowadays, you'll have to vet your partners and audit how your data is handled internally. It's hard to come up with concrete examples when it's basically every single company above a decent size, as they typically don't want to work against the law. Same for the retention period, the very type of log that you'd open for internal harvesting (you could still be collecting the info, but keep it way more confidential to the point no one outside of your SRE team has access to the totality of it) It's as if you were asking what changes the PSI and DSS compliance laws had on the card processing field.