This discussion paper by the ABBL, published in May 2018, examines the impact of the EU General Data Protection Regulation (GDPR) on Big Data and Data Analytics projects in financial institutions. It provides practical guidance on lawful data processing, privacy by design, and governance obligations.