The General Data Protection Regulation (GDPR) has now been published in the Official Journal. The publication was on 4th May 2016, meaning the GDPR will enter into force on 24th May 2016, and provisions will be directly applicable from 25th May 2018. Organisations across Europe now have two years to prepare for the changes. Third countries like the Channel Islands who currently have adequacy status will need to wait a little longer for full details of that process to emerge. Early indications are that implementation of new legislation across the Islands will coincide with the 25th May 2018 date and work continues to secure the necessary political direction. All organisations, especially those with EU clients, would be well advised to start considering the impact of GDPR and how their compliance models may need to adapt. You can find our 10 steps to GDPR compliance here and a link to the full text here.