When the General Data Protection Regulation (GDPR) of the EU entered into force on May 25, this was a milestone for European and global privacy. Organizations that have paid attention to the GDPR can now shift gears from readiness toward sustained compliance. Consent strategies, policies on data subject rights, and breach notifications are probably most prominent, as well as any large predictive analytics programs with personal data access and anything involving storage of data in a cloud. There is a host of issues.