The General Data Protection Regulation on the protection and processing of personal data and on the free movement of such data will come into force in Cyprus in May 2018. The GDPR aims to harmonise national data protections laws across the EU and introduces new features that correspond with technological developments. Businesses should take advantage of the time available before the GDPR comes into force to consider the impact of the changes and identify what implementation and compliance strategies they need to put in place. Plan ahead for a smooth transition.