Similar to the majority of global organizations, insurers must move to an operating model that is compliant with the General Data Protection Regulation by May 2018. However, the challenges the industry face will make their approach to compliance unique.