The data controllers carries primary responsibility, along with any data processors to protect the data subjects under GDPR.  Businesses who sells IT equipment even if that equipment processes personally identifiable data have far less stringent obligations.  However to remain competitive offering GDPR compliant features makes good business sense. This normally involves development in two areas […]