General Data Protection Regulation (GDPR) will become enforceable on May 25, 2018, after the expiration of the 2-year transition period. As companies prepare for compliance in anticipation of the enforcement date, nonprofits should also ensure that they are complying with GDPR if it applies to them.