Series Overview

• Data inventory and mapping
• Lawful bases for processing
• Build and maintain a data governance system
• Data protection impact assessments and data protection by default and by design
• Preparing and implementing data-retention and record-keeping policies and systems
• Transparency and privacy notices
• Accommodating data subjects’ rights
• Data breach and the GDPR Vetting and contracting with processors
• Vetting and contracting with processors
• Communicating with supervisory authorities

In 2016, the Westin Research Center published a series of articles identifying our analysis of the top 10 operational impacts of the EU General Data Protection Regulation. Now, with the May 25, 2018, GDPR-implementation deadline looming, the IAPP is releasing a companion This series presents common practical organizational responses that our members report undertaking in anticipation of GDPR implementation. The IAPP previously released a companion series on the top operational impacts of the GDPR.