Comment by akshatpradhan

All you’re telling me is that your Agile Startup doesnt have:

1) an updated Asset Inventory

2) a Data Classification Scheme

3) Data Labeling Policy & Procedure

Those are basic components of an InfoSec 101 course taught by Community Colleges and the top basic items GDPR is wanting.