We live in a new world of EU privacy rules shaking US businesses. As of 10 months ago, many of you had not heard about the GDPR when we explained how the GDPR applies to US companies. By now your company may be on its way to GDPR compliance (but beware: see takeaway #3 below).

For those of us who have been immersed in GDPR compliance projects over the last year, it was refreshing to hear so many of our colleagues, family members and news outlets around the world pay attention to the GDPR on May 25th. But we also heard a lot of misunderstandings about the GDPR. Here are our five takeaways from the past year: