GDPR has done a world of good. It has enabled us to understand digital privacy, empowered the consumer about her rights and put a steep monetary value on non-compliance. In a nutshell, the entirety of it can be summarized into responsibilities – what data are you collecting (of me), where is this data being stored, who (in your organization) can access my data, how are you providing safeguards to protect my data, when will you notify me (and the authorities) if my data has been compromised – and customer’s rights (access, modification, erasure, transfer of my data at any time).
