The European Union is changing the way it regulates data protection in the wake of large-scale cyber attacks and data loss incidents. This paper looks at the new data security requirements under the GDPR and provides practical tips on how to prevent a data breach disaster from happening to you and your customers.