In 2016, the Westin Research Center published a series of articles identifying our analysis of the top 10 operational impacts of the EU General Data Protection Regulation. Now, with the May 25, 2018, GDPR-implementation deadline looming, the IAPP is releasing a companion series to present common practical organizational responses that our members report undertaking in anticipation of GDPR implementation. This second installment in the 10-part series addresses organizational efforts to implement the GDPR’s requirement that companies rely on a “lawful basis” to justify the processing of personal data. IAPP Westin Fellow Lee Matheson, CIPP/E, CIPP/US, has the details. 
Full Story