The Top 10 Operational Impacts of the GDPR

Although many companies have already adopted privacy processes and procedures consistent with the Directive, the GDPR contains a number of new protections for EU data subjects and threatens significant fines and penalties for non-compliant data controllers and processors once it comes into force.

With new obligations on such matters as data subject consent, data anonymization, breach notification, cross-border data transfers, and appointment of data protection officers, to name a few, the GDPR requires companies handling EU citizens’ data to undertake major operational reform.

This report explores the major issues with which organizations will have to grapple as they bring themselves into compliance with the world’s most impactful privacy law.

The IAPP additionally published a companion series on the top 10 operational responses to the GDPR .