The European Union’s General Data Protection Regulation (GDPR) came into effect in May 2018 and effects businesses based in Australia who deal with customers in Europe. The GDPR requires any individual, company or organisation which offers goods or services to individuals within the European Union, to take a series of measures to keep personal data safe. Penalties for failing to have adequate data protection measures in place are severe. This staff awareness course takes a closer look at GDPR and explains its implications for Australian businesses.