Much has been made of the EU General Data Protection Regulation's 72-hour requirement for notification following a data breach, but there is certainly more to complying with the GDPR's breach requirements than a quick turnaround. In this next installment of the "Top 10 Operational Responses to the GDPR," IAPP Westin Fellow Lee Matheson, CIPP/E, CIPP/US, CIPM, looks at the new processes for breach preparedness, response, and notification some organizations may have to put in place before May 25, 2018, when the GDPR comes into force. Even U.S. companies, used to complying with myriad breach notification responsibilities, may find something new and different in what the GDPR requires. 
Full Story