FTI Consulting, Inc. announced the Company has launched readiness services to help companies prepare for the General Data Protection Regulation (“GDPR”), which goes into effect in May 2018. For companies with employee or customer data for European citizens, FTI Consulting can help with the practical implications of GDPR, including data protection and information security, managing an operational environment, implementing information governance practices and applying change management in complex regulatory circumstances. Companies that do not meet the stringent data protection requirements within the GDPR risk fines of up to €20 million or 4% of global annual revenues. To help companies prepare, FTI Consulting provides a range of services, including: · GDPR Assessments: Review requirements and applicability, and then identify gaps and areas of risk across people, process and technology to develop a pragmatic roadmap and action plan. GDPR Technology and Program Implementation: Provide privacy subject-matter expertise and assist with the implementation of GDPR-enabling technology, from data mapping to records management and data remediation. Define requirements, perform vendor selection and implement compliant processes and procedures.Data Map Development: Develop a GDPR-specific personal data map and inventory personal data across the enterprise, where it flows internally and externally in the organization. Sensitive Data Remediation: Define and classify data to identify redundant, old or trivial (“ROT”) data appropriate for remediation, and decommission applications. Data Subject Rights: Define a standardized process to review and efficiently handle data subject requests, including defining roles and responsibilities for internal and external stakeholders. Enable efficient data mapping, identification and searching across diverse data sources. Privacy Impact Assessment and Privacy by Design: Assess risks for specific areas, systems or projects, update system provisioning processes, policies, procedures, roles and technical standards, and review and align with an Enterprise Risk Framework.