Experts believe that many US colleges and universities are not prepared for the new European data protection rules set to take effect on May 25. 

On May 25, the EU's General Data Protection Regulation (GDPR) will affect organizations worldwide, including U.S. colleges and universities, which processes data relating to people in Europe.

What does this mean? Any US college or university that does not comply with the EU's rules will face fines, especially if an EU student interacts with a US college or university website. 

These interactions include online donations, online applications, or international communication. 

Reliable sources report that Gian Franco Borio, a lawyer who offers legal counsel of the European Association of Study Abroad said, "Every U.S. educational institution has here and there, somehow, a relationship with Europe."

What happens to institutions that don't comply? Up to $23 million in fines. 

The question is whether US institutions are prepared. Barmak Nassirian, director of federal relations and policy analysis at the American Association of State Colleges and Universities said, "I seriously doubt that any institution in the U.S. will be even remotely in compliance on May 25."

He added that he suspects many institutions may not even be aware of the new GDPR.

What will happen under the new GDPR? Colleges and universities will need to take extra steps to protect the personal data of people in the EU--regardless of their status as EU citizens or permanent residents.

This means that American students and faculty members who communicate with US campuses while they're in Europe are also affected.

Colleges and universities must be able to accommodate all requests to retrieve, correct, or erase data, and promptly report any and all data breaches.

The regulation also calls for minimizing data. Nassirian said, "In many ways, the advent of technology and the fact that storage is now so highly affordable has created sloppy practices."

It's not just a problem for IT departments, he argues. The new regulation goes right to the heart of university governance and data maintenance.

Stay tuned for updates.

Learn more about data science.