(As the data protection officer for the growing company.

For cost-effective horizon scanning, curatedmailing lists/alerts(from regulators, reputable privacy organizations, and industry groups) provide continuous updates at low cost. Engaging regulators and retaining external counsel can be high-effort/high-cost, while workshops are useful but periodic and less comprehensive than automated alerts.