If you are still trying to fully understand and implement the European Union’s General Data Protection Regulation (GDPR) nearly a year and a half after it went into force, you’re not alone.

Regulators who spoke at the recently concluded Compliance Week Europe conference in Amsterdam acknowledged businesses were still very much in the “awareness” phase of implementation of the EU’s complex new set of data privacy rules, but that doesn’t necessarily mean they’re shielded from sanctions.