Towards an Understanding of Stakeholders and Dependencies in the EU GDPR

Personal data has evolved into an essential element of current business models, which pose new challenges to legislation and organizations. To address these challenges at a European level, the European Commission has passed the General Data Protection Regulation (GDPR). Using a data-driven approach, we identify the key stakeholders that are described in the GDPR, which are the data subject, the controller, the processor, the data protection officer and the supervisory authority. We provide a visual representation of how these entities are interrelated according to the corresponding GDPR articles and determine that companies acting as controllers have the largest need for future actions to achieve compliance with the GDPR.