As the New Year dawned, companies on both sides of the Atlantic were probably suffering from a little data security-related hangover as a result of abrupt changes in the global privacy landscape in 2016. But even more change is on the way in the form of the EU General Data Protection Regulation, a wide-ranging protection and privacy law affecting companies doing business in the EU.
This article provides clarification on the three areas of the new regulation that are drawing the most questions and addresses how it will affect companies that do not have EU locations.