This article appeared in Cybersecurity Law & Strategy, an ALM publication for privacy and security professionals, Chief Information Security Officers, Chief Information Officers, Chief Technology Officers, Corporate Counsel, Internet and Tech Practitioners, In-House Counsel. Visit the website to learn more.

The landscape of data privacy law has changed significantly over the last five years. With the General Data Protection Regulation (GDPR) going into effect in the EU in May 2018, data privacy compliance obligations forever changed for companies around the globe. For the first time, companies had to recognize new rights for consumers regarding their personal and sensitive data or face serious penalties.