>You can just do what my university did, hire a small shell firm with 3 employees to hold all your data

except you can't in South Korea because PIPA (their data privacy/compliance framework) is as strict if not stricter than GDPR and comes with criminal liability in case you violate consent rules, so you can't just send other people's data to some third party shell company either

why do people always make these completely generic comments as if they've just on the toilet figured out the one simple trick every data framework covered over a decade ago