When the European General Data Protection Regulation (GDPR) enforcement kicks in this May, responding to data subject rights will be a challenge for many large organizations. The GDPR enables EU individuals to request corporations to inquire about what personal data they have on them or even delete their personal data. Requests must be responded to promptly, within one month, leaving companies very little time to perform a task that they may not be equipped to handle. No barrier exists for citizens to enact these rights, and some countries are planning campaigns to educate the public on them in the coming year.