"Review all of your privacy notices and make sure they accurately reflect what your organization is doing, are easily understood by users, and are not hidden deep inside other legal terms," says Chris Morales, Vectra head of security analytics. "Also verify that you are keeping records on what you are doing for GDPR in case a problem does arrive.”

Read the article