On 25 May 2018, the European Data Protection Regulation will go into effect. Many formalities with the body that manages the protection of personal data in France (the CNIL) will disappear. In exchange though, the responsibility of employers will be strengthened. They will have to ensure optimal data protection at every moment and be able to demonstrate it by documenting their compliance. They will also have to manage the risks and put in place internal procedures to protect employees’ personal data. In order to help companies prepare for this deadline, the CNIL has published a practical fact sheet on its website, detailing the various obligations that employers must comply with, through 6 handy steps.