The GDPR imposes numerous obligations on controllers of EU own info. Some obligations certainly are a continuation of Those people proven with the 1995 EU Directive, but others are both new or expanded. The target is usually to assess equally the AICPA criteria and necessities set forth from the CCM https://sites.google.com/view/gdpr-compliance-in-usa/