On May 25, 2018, the European Union's new General Data Privacy Regulation (GDPR) takes effect, bringing about the most significant change to European data security in more than 20 years. For the first time, data breach notifications will be mandatory for employers in all 28 EU member states. And that's not all.

On this podcast, Littler Mendelson employment attorney Philip Gordon, who co-chairs the firm's Privacy and Background Checks Practice Group, examines what the GDPR means for US businesses. Gordon cautioned, "Anyone who markets products over the web will have reason for concern and will have to look at their website privacy policy."