In this video, privacy & data security partner Heather Sussman discusses the EU’s new data protection framework, the General Data Protection Regulation (GDPR), which will go into effect in May 2018. The GDPR is designed to standardize the regulation of personal data processing activities in Europe, requiring that organizations document data processing activities, as well as those of their vendors and vendors’ vendors, measures which many companies find highly challenging.