The Buffalo Law Journal notes Lowenstein Sandler as counsel to a company discussing its General Data Protection Regulation (GDPR) compliance efforts. The article quotes Mary J. Hildebrand, who notes many companies’ confusion as to whether and why GDPR applies to them. Hildebrand explains that GDPR has expanded the definition of personal data, that it applies depending on where data is processed (not just on where it “sits”), and that GDPR compliance obligations will involve careful judgment calls.