GDPR – An issue of hearts and minds, not cyber eiuperspectives.economist.com/technology-inn… "GDPR is about clarifying where PII is in any given organisation"