[rm999]

Ever since GDPR and then CCPA were announced I've had vendors trying to sell me on solutions to manage our data - often heavy-handed solutions that come at a high technical cost. The sales pitches always stand on scare tactics, that the very existence of the company I work at is at risk.

But when I talk to lawyers they are less worried. They tell me all the best practices we already follow mostly protect us, that we need to make some minor changes here and there.

So, over time I've learned to ignore scare tactics like this. My experience is articles like this are sales pitches and not a good faith attempt at educating us.