It is critical for U.S. entities and legal and insurance professionals advising those entities to be aware of the scope of this regulation to determine whether they are subject to it, and to take the necessary steps towards compliance. Even if it is determined that the GDPR is not applicable to your organization, there are a number of practical steps you can take to better your overall cyber hygiene.
Read the full article here: Healthy Habits for GDPR: Good Cyber Hygiene Is Now Required by Law
