> there need to be severe penalty for such abuses - not just financial, serious jail time.
punishment for who? those making the poorly thought out policy or the restaurant / pub owners who suddenly see themselves as the nominated enforcers of these data collection activities? rule #1 should be not to collect data you don't have a safe way to process. GDPR or not this shouldn't even be collected.
punishment for who? those making the poorly thought out policy or the restaurant / pub owners who suddenly see themselves as the nominated enforcers of these data collection activities? rule #1 should be not to collect data you don't have a safe way to process. GDPR or not this shouldn't even be collected.