Quote:
	
	
		| 
					Originally Posted by 1andrew1  Where does it state that it needs to be written down? Organisations will take a proportionate approach. The UK has said that this is best practice legislation that will continue in the future. If a consultant has sold you an over-engineered solution and you chose to blame the EU for your buyer remorse there's little I can do. | 
	
 Not a good answer, Andrew. If it's not written down, how do you communicate the privacy policy to those whose personal data you are using? Thought transfer, perhaps?