GDPR was so 2018, why are we still discussing this?

GDPR was completed on the 25th May 2018-Or so you, your Exec team and your legal advisers thought. Well actually that’s not really the case, the 25th May 2018 wasn’t a deadline, more the start line of a life-long prerequisite. If your legal team said everything was complete and you told your executive community the programme was finished how do you now go back to them and explain the race has only just started? What still needs to be done? What the myriad of different types of personally identifiable data are, who needs to care and why? The definitions and implications of being a Data Controller, Processor or Joint Controller. And the catastrophic implications of ignoring the implications of data protection.