What about Brexit, Schrems II case regarding SCC’s and Privacy Shield? Privacy notices - is it even possible to inform data subjects following all the obligations in the GDPR? And what about consent, good or bad? What should the register of processing activities actually look like, what should you really put into it, in detail? What is a privacy program and is it a tool for the controller or the DPO? We met with mr Paul Breitbarth, the most polite privacy professional of them all.