1. Location
Creation of an inventory of personal data
GDPR requires organisations to be able to identify every reference to any individual across all systems
2. Governance
Managing personal data access and use
Establish a clear view of existing and define new data processing activities required
3. Security
Protecting personal data against vulnerabilities and breach
Business will need to be able to prevent, detect and respond
4. Reporting
For data requests, breaches and accountability
GDPR requires a higher standard of transparency, accountability and documentation than the majority of companies will have encountered before