I have today heard of a Danish company with a US vendor delivering on-line services to them. This vendor has today announced that they are not doing anything in regards to the GDPR. They seem to abandon doing business in the US, at they estimate that the costs associated with compliance will zero out their earnings doing the business.
What's your experience?
These corporates will always link compliance to operation cost and view it negatively rather seeing the benefits of building, gaining or demonstrating trust and reputation.
As consumers too, we should single out these companies and shunt them prompting controllers to use more trusted service providers.
Today, the issue is on GDPR...tomorrow, they will find managing security is highly costly...