GDPR / Uncategorized A DPO Take On The Global PHP Flaw Critical PHP flaws were disclosed on 21 October 2026, and fixes exist. From that point, a controller running unpatched PHP cannot say the risk was unknown. Here is what Article 32 UK GDPR expects, and how fast.