With just 100 days to go until GDPR legislation comes in to force it is clear that professional services firms are finalising their plans for compliance. However the last few weeks have seen a very interesting change in the position of many firms. Based on conversations we had with firms during the last few months of 2017 it seemed that many were planning to do a major consent mailing in order to meet their obligations but over the last few weeks it's apparent that many if not most have reconsidered that position and are focusing on policies of legitimate interest, archiving and data cleaning. As with Brexit, there are as many different opinions as people you ask as to what the legislation actually says, but one thing is absolutely clear, the sense of panic is subsiding and we are all pursing our stiff upper lips and getting on with it.
With just over 100 days left before the application of the new law, the guidance outlines what the European Commission, national data protection authorities and national administrations should still do to bring the preparation to a successful completion.