Noreen Krall: “The heavy processing requirements on corporations doing business in Europe are just tremendous. It really does pose a challenge.”

As corporate legal departments brace for new European privacy protections set to take effect in May, a top in-house lawyer for Apple Inc. on Thursday predicted the rules—known as the General Data Protection Regulation—will put “heavy processing requirements” on companies that must give consumers more control over their personal information.

Apple vice president and chief litigation counsel Noreen Krall, speaking at the ChIPs Women in Tech, Law and Policy Global Summit in Washington, underscored the challenge companies faceas they set up systems to handle consumer requests for the removal of personal data and to obtain consent for the collection of certain information.

“Basically it puts heavy, heavy processing obligations on companies” to deal with requests concerning the handling of consumer data, Krall said. She added: “So the heavy processing requirements on corporations doing business in Europe are just tremendous. It really does pose a challenge.”

The costs of failing to comply with the European Union's new, uniform privacy regulations can be steep, with a maximum penalty of 4 percent of the violating company's global sales revenue.