To All
There is a similar topic in the Spanish Forums that I made a comment on ..
viewtopic.php?f=6&t=35051
As I understand the GDPR can be mitigated by using Data Encryption and or Drive encryption and is not necessarily a pre-requisite .. I have encrypted .dbf and Sql Server with ADO .. it is not difficult to do .. The point I am making is YES, do all these things but if your data is breached there is mitigation as far as a penalty if the data is encrypted.
To make database encryption work .. you just need to encrypt any personal information such as Names, Addresses, Credit cards, etc .. I use a Public Domain function mentioned in the thread below
viewtopic.php?f=6&t=35051
For me as a developer, using Data encryption is just a case of last resort .. most if not all data breaches have been through the penetration of a Web Site ... All we are doing ( it seems ) is the CYA for the lackless Web developers and Network admins that haven't got a clue what they are doing.
Just my 2 cents worth
Rick Lipkin