GDPR has been one focus of my work for over a year, and the level of interest in GDPR compliance has exploded in the last couple months. Lots of people are now scrambling to try to meet the end of May deadline, motivated often by their interactions with their business partners who are also working on compliance.

I've spent a lot of time interacting with potential clients lately where I feel like I'm successful in educating them on how big this GDPR work normally is. But the end result is usually that I convince them to either hire someone willing to do short-sighted work (and, in my opinion, waste their money AND increase their risk). Or they end up deciding not to do anything.

Hopefully, this information will be of benefit to anyone who has any kind of GDPR work to do but isn’t familiar with GDPR or maybe even formal privacy management. And hopefully, those who reach out to me about their projects will do so knowing that I’m going to tell them there’s no GDPR easy button.