The EU’s upcoming General Data Protection Regulation is already affecting everything from the way companies handle e-discovery to how they train their employees.

But there is still much left for companies to do in order to be compliant by the late May enforcement date. Many companies’ marketing efforts, for instance, may need to be revamped given the regulation’s mandates.