GDPR enforcement is quickly approaching. Companies outside the EU have been either ignoring the regulations, have been naive about applicability, or have taken a wait and see approach to see how serious or severe the regulation will be applied to non-EU companies. As a result of the sudden sense of urgency, vendors have taken to using FUD tactics to sell their products as the magic bullet to quickly becoming compliant. I'll be taking the audience through debunking a few common misconceptions around the applicability of GDPR and dispelling the FUD tactics in use to sell technologies that are viable controls but don't solve the full problem companies will be quickly facing.