As readers will no doubt be aware, the General Data Protection Regulation (GDPR) has applied from 25 May 2018. Six months on, Daradjeet Jagpal carries out an initial appraisal of four key aspects of the GDPR and provides his thoughts on what lies ahead. 1. Transparency At the nucleus of the GDPR are the concepts of transparency and accountability. Transparency requires organisations to be open and upfront with individuals by informing them of what personal data is handled by