Although the European Union’s (EU) General Data Protection Regulation (GDPR) went into effect on May 25, 2018, many companies have only begun taking steps to comply, and most still have a long way to go. Human capital data, much of which qualifies as “sensitive,” must be protected more vigorously than other kinds of data. At the same time, both the volume and business value of HC data have dramatically increased. It’s not always clear what the impact of the regulation will be on data processing, especially on HC analytics. What’s HR’s role in protecting the personal data of employees, applicants, and contingent workers under GDPR?