DSARs and the Risk Budget Blindspot

Privacy compliance is not a legal obligation that happens to have commercial consequences. It is a commercial risk that happens to be expressed through legal obligations