Information Commissioner’s Office GDPR Sanity Check
Information Commissioner’s Office – a main UK regulator provided interesting facts about the coming GDPR legislation. The GDPR regulation is not set in stone and it is continuously evolving and ICO is even now issuing new guidelines. The myth busting section https://iconewsblog.org.uk/tag/gdprmyths/ on ICO blog is well worth reading
Fines will bankrupt many companies
Last year the ICO (2016/2017) concluded 17,300 cases. Only 16 of them resulted in fines for the organisations concerned, and these organisations ignored all prior warning to put their house in order.
The ICO has a complete set of regulations already in place, and all you have to do is read, and comply with them
The various working group within the ICO are even now issuing new guidelines that will be part of the GDPR programme
Consent is the main area of GDPR that needs to be sorted out.
There are 5 more ways of processing data that may be more pertinent to an organisation than consent, so often you do not need it. If consent is difficult look, for a different lawful basis.