The EU General Data Protection Regulation (GDPR), directly binding upon companies throughout the European Union commencing as of 25 May 2018, requires that companies’ internal data protection management processes be adapted in various and partially comprehensive ways. This report shows where implementations need to be made and how these implementations can be handled from a practical perspective.