Due to the GDPR’s extra-territorial scope and major changes in comparison to current legislation and regulations, data breach risks within Hirslanden have been analysed and proper implementation and management of data privacy governance have been enforced with the assistance of external advisors in order to manage operational and reputational risks and to avoid potential fines for non-compliance.