The GDPR applies to all and is considerably more stringent than previous legislation, providing for severe sanctions for transgressions. No organization that does business with EU citizens is immune. Complying with its requirements will be no easy task and the time to start preparing is now since there are less than two years to go before compliance is compulsory. The use of a comprehensive data protection platform will do much to ease the burden of compliance.