US organizations processing the personal data of EU residents must comply with the new EU General Data Protection Regulation (GDPR) from May 25 2018. Failure to comply could result in fines of up to 4% of annual global turnover or 20 million. This concise guide is essential reading for US organizations wanting an easy to follow overview of the new regulations and the compliance obligations for handling data of EU citizens, including guidance on the EU-US Privacy Shield.