The Costs Of GDPR And Privacy Act Compliance – Where Should They Fall?

How much should organisations pay for their data service providers to be 'GDPR compliant'? It seems that data processing vendors are passing on their costs of compliance to customers, and with GDPR compliance a hot topic for many organisations in Australia (in addition to complying with new Australian requirements for mandatory data breach reporting), the question of what costs can be passed on is an important one for organisations to consider.

Evidence is emerging anecdotally that data processing vendors are passing on their costs of compliance with the European Union General Data Protection Regulation ('GDPR') to their customers. With GDPR compliance a hot topic issue for many organisations in Australia at the moment (as well as contending with new Australian requirements for mandatory data breach reporting), the question of what costs can be passed on is an important one for organisations to consider.