Engineers should ideally be working directly with in-house counsel or external specialists under these circumstances. This isn't just applicable to some niche

Engineers should ideally be working directly with in-house counsel or external specialists under these circumstances. This isn't just applicable to some niche organisations working within e.g. finance (though there's likely to be a higher regulatory burden there), engineers need a basic understanding of something like GDPR to do their job because it impacts every organisation handling personal information in any form.