The General Data Protection Regulation (GDPR) comes into effect May, 2018. To be compliant you need to combine business process, legal and technology.