3 points
Exactly. I made a GDPR request for deletion. They can get in big trouble if they are soft deleting.
1 point
Have they ever been audited?
How does the legal authority work with GDPR if the company’s physical and financial operations are entirely within the US? Would the GDPR even be allowed to audit them without their consent?
1 point