GDPR: Power to the People or What You Must Know about Data Subject Rights As the May 25 date for GDPR (General Data Protection Regulation) implementation zooms closer, now is the time to review and understand your organization’s responsibilities regarding the rights of data subjects (also known as “every person”).