Many companies and professionals working hands-on with data have considered the European General Data Protection Regulation (which went into force in 2018) as merely another requirement to fulfill. However, complying with the GDPR can be an opportunity for the organization. Not only does personal data protection relate to third parties, but it also concerns all the company’s strategic information, including confidential information, projects and know-how. Our objective is to see how we can integrate our work on GDRP compliance with the company’s organization and roles.