The GDPR imposes new rules on organizations to protect EU individuals’ personal data Banks are responsible for EU personal data managed by their third parties  but are they ready to manage their third-party risk and comply with the GDPR? This article discuss GDPR requirements to strengthen banks’ third-party risk management