Businesses around the globe continue to grapple with the requirements of the EU’s General Data Protection Regulation (GDPR), which went into effect May 25. Law firms are no exception—and that’s true even if they have no offices overseas.

Pennsylvania firm leaders and legal technology professionals said GDPR compliance should be a priority for most firms, as it applies to any business that handles data belonging to EU citizens. For firms that are behind in getting prepared, they said, it’s better late than never.