The GDPR has already come into force and will be effective from May 25, 2018! At the same time, the new German Federal Data Privacy Act will take effect, replacing the current legislation in full. Looking forward, these provisions will not just impact EU-based companies but, in many cases, also companies domiciled outside the EU if they process data of persons in the EU. The GDPR will result in material changes for the companies concerned. It is vital to know what these are and how to respond to them. Data protection is a management task.