Published: May 2019

Now that implementation of the EU General Data Protection Regulation is nearly a year old, the IAPP collected figures from the primary "guardians" of the young upstart and heard from EU-based data protection authorities of how that first year has gone and what their main areas of focus will be in the next year.

For this new IAPP white paper, IAPP Senior Privacy Fellow Caitlin Fennessy, CIPP/US, reviewed European Data Protection Board and DPA reports and sought input from regulators in Austria, France, Ireland and the United Kingdom on five key issues, including the number and nature of complaints, investigations and data protection officer notifications over the first year of the GDPR, and the technical challenges and guidance needed in the year ahead. The document also includes reflections from IAPP country leaders in the EU. Here's what we learned.