Much less than 250 staff but its facts-processing impacts the legal rights and freedoms of knowledge subjects, isn't occasional, or contains certain kinds of sensitive personal facts. Retailers could possibly be required to undergo (and pay for) an evaluation making sure that they’ve improved their security, which we’ll explore in https://cybersecurityconsultinginusa.blogspot.com/