The new EU GDPR breach notification requirements mandate the increase in data monitoring, privacy data leak prevention and alerts
Vast “Personal” Data Pool to include data from cookies, genetic data, IP & MAC addresses
Data Profiling will probably require explicit consent from the subjects of profiles
PII may need explicit consent for collection and processing
Outside of the EU? Activities geared towards EU residents means you are covered even if by Non EU entities.
Data Protection Officers must be designated
Breach Notifications Data authorities and consumers must be notified within 72 hours after the discovery of the breach.
Big Fines

[spacer]
Signup for the GTB GDPR Readiness Assessment
[sm_hr]
[i] http://privacylawblog.fieldfisher.com/2016/getting-to-know-the-gdpr-part-10-enforcement-under-the-gdpr-what-happens-if-you-get-it-wrong
Some GDPR Definitions: https://www.eugdpr.org/glossary-of-terms.html