Key takeaways

• In one year, on 25 May 2018, the EU General Data Protection Regulation ("GDPR") will come into full force, significantly changing the EU data protection landscape.
• This client update sets out 10 steps that business should consider to determine whether they are subject to the GDPR’s extended jurisdiction scope and to ensure that they comply with its provisions if so.
• The time to take these steps is now, as many are likely to take a significant effort to implement. Given that the GDPR’s text has been available and widely publicized since 2016, EU regulators are unlikely to give slack to companies who fail to fully comply.