The GDPR (General Data Protection Regulation) has been in effect since 2016. However, companies are still faced with taking technical and organizational measures to meet these high data protection requirements. Numerous court cases and lawsuits show that not every organization has been completely successful.