It’s been nearly a year since the European Union’s General Data Protection Regulation went into effect, sparking conversations and compliance efforts in legal departments worldwide.

At a Friday morning International Association of Privacy Professionals Global Privacy Summit session in Washington, D.C., Microsoft deputy general counsel and corporate vice president Julie Brill spoke with Andrea Jelinek, European Data Protection Board chairwoman and Austrian Data Protection Authority director, about GDPR’s first year of challenges and changes and what could come next.