This publication provides an overview of the EU General Data Protection Regulation ("GDPR") and its requirements for protecting the personal data and privacy of individuals located in the European Union. This book describes some likely practical effects on developing, delivering, and processing tests and assessments for use in the EU, and offers guidance on best practices for compliance with the GDPR so as to avoid possible violations and potential penalties.The GDPR applies to all organizations that obtain, handle, process, store, or otherwise deal with or have control over the personal data of EU residents via automated methods, as well as where such data is part of a hardcopy filing system. As appropriate, this Guide suggests examples of how existing procedures or processes may be at risk for leading to violations and best practices for mitigating those risks.