> Developers have to have mechanisms in place to delete gdpr data when required and not store data that's not required for you goals
Purely anecdote, but zero companies I know in Germany, Italy or France are doing this. (The ones in Switzerland are.)
There is a cosmetic fix that produces an email so there is something to show a regulator if they come knocking. The logic being investing anything more than that is a crap shoot, given nobody knows how each of the EU’s 28 data regulators will interpret the rules.
Purely anecdote, but zero companies I know in Germany, Italy or France are doing this. (The ones in Switzerland are.)
There is a cosmetic fix that produces an email so there is something to show a regulator if they come knocking. The logic being investing anything more than that is a crap shoot, given nobody knows how each of the EU’s 28 data regulators will interpret the rules.