The European Union general data privacy regulation places a broad number of restrictions on the collection and transfer of individuals personal data. A company based in the US that does business with several clients in the EU realizes that not all of its current security practices align with GDP our standards the company drives an action plan to address his issues and resolve them accordingly with security principle is illustrated in the