As the GDPR effective date looms ever closer, we see companies taking a more nuanced view of compliance. One thing they’ve noticed is that consent isn’t the only justification that GDPR allows for using personal data – there’s also “legitimate interest”, which doesn’t need consumer agreement. Data protection vendor AvePoint and privacy researchers Centre for Information Policy Leadership found that 45% of companies now intend to rely on legitimate interest, up from 31% the year before. Still, 62% expect they’ll need to re-obtain consent. Only 17% have a complete personal data inventory. It’s a good overview of GDPR issues and trends.