Re:GDPR for lazy people: Block all European users with Cloud...
by loup-vaillant on Friday May 25, 2018 @04:28PM
(#17157640)
Ah, OK. Makes more sense now. Still, requiring ISO compliance from a small business sounds like madness. An audit ought to be enough.
[ Parent
| on HN ]
Re:GDPR for lazy people: Block all European users with Cloud...
by Kalium on Friday May 25, 2018 @04:33PM
(#17157686)
Again, makes total sense from the perspective of an American legal department. They're falling back on the tools they know to de-risk vendors, which is formal certifications and accreditations. ISO, SOC, etc. The lawyers are going to be extra twitchy because of how vague and hand-wave-y GDPR is.
An actual compliance audit from an accredited auditor, paid for by the SaaS offering of course, is not going to be cheap or easy.