GDPR threatening to catch third parties off guard

It has been two years since the EU’s General Data Protection Regulation (GDPR) was announced, but there are still companies unaware of how wide-ranging the changes they need to make are and how little time they have left to make them.