A recent Dechert webinar explored the E.U.’s General Data Protection Regulation (GDPR), its impact on fund managers and firm compliance. The program was moderated by Dechert partner Timothy C. Blank and featured Dechert partners Dr. Olaf Fasshauer and Paul Kavanagh, as well as associates Hilary Bonaccorsi, Jennifer McGrandle and Sophie Montagne. This article, the second in a two-part series, analyzes the impact of key GDPR provisions, including data subject rights; data privacy management systems and notices; data protection officers; data protection impact assessments; and breach notification. The first article outlined how regulators have promoted compliance with the GDPR, the cross-border transfer of data and the impact of Brexit. See our two-part series “What Are the GDPR’s Implications for Alternative Investment Managers?”: Part One (Apr. 26, 2018); and Part Two (May 10, 2018).