This question is tricky, because the answer isn’t as clear as with the previous question. The answer is: it depends. A company should take ‘appropriate measures’- but what is appropriate, who decides this? And how? To answer the GDPR question we need to define what appropriate measures is. And a first place to look for […]

Oct 062017