This whitepaper is intended to analyse how the franchise system maps to the General Data Protection Regulation (GDPR) and important considerations from both the Franchisee and the Franchiser perspectives. It is not intended to inform each party of GDPR regulatory obligations as separate entities or how a compliant data protection program should be implemented, but rather how the contractual and commercial relationship impacts aspects of GDPR obligations.