The General Data Protection Regulation (GDPR), which came into force in May 2018, presents a set of challenges to charities and nonprofits. While GDPR is an initiative of the European Union, its impact is being felt globally, with North American institutions scrambling along with their UK and European counterparts to understand their obligations.