A Practice Note providing an overview of processor obligations under the EU General Data Protection Regulation (GDPR). This Note includes an overview of the legal framework governing personal data processing in the EU, the obligations imposed on processors under the GDPR, guidance on how to comply with the obligations, and possible sanctions for non-compliance.