@SandPaper Yep - this is exactly the ambiguity (or discretion, depending on your perspective) that the EU seems to like and businesses hate. IMO, that question (whether the RTBF touches tapes) should be decided by the text of the reg itself, *not* by that local supervisory authority.

Sign in to participate in the conversation
Infosec Exchange

A Mastodon instance for info/cyber security-minded people.