With Theodore F. Claypoole, Orla O'Hannaidh
If your company is a data controller under the GDPR (for US companies, follow this flowchart), then your company will need to update its privacy policy or privacy notice.