TY - JOUR AB - Purpose The digital paradigm people live in today, which drastically increased the consumption of data, is a threat to their privacy. To create a high level of privacy protection for its citizens, the European Union proposed the General Data Protection Regulation (GDPR), which introduces obligations for organizations regarding the storing, processing, collecting and disclosing of data. This paper aims to identify the critical success factors of GDPR implementation.Design/methodology/approach A systematic literature review was conducted by following a strict review protocol, where 32 documents were found relevant to perform the review and to answer to the proposed research questions.Findings The critical success factors of GDPR implementation were identified, including barriers and enablers. Furthermore, benefits of complying with GDPR were identified.Research limitations/implications As GDPR is a relatively recent subject, there are still few scientific papers about it. Therefore, the authors were unable to neither identify nor present a robust conclusion regarding specific topics, such as practical outcomes.Originality/value On the basis of the literature, the identified critical success factors may be useful for organizations as these can be better prepared to achieve compliance by prioritizing the enablers and avoiding the barriers. VL - 21 IS - 4 SN - 2398-5038 DO - 10.1108/DPRG-01-2019-0007 UR - https://doi.org/10.1108/DPRG-01-2019-0007 A1 - Almeida Teixeira Gonçalo A2 - Mira da Silva Miguel A3 - Pereira Ruben PY - 2019 Y1 - 2019/01/01 TI - The critical success factors of GDPR implementation: a systematic literature review T2 - Digital Policy, Regulation and Governance PB - Emerald Publishing Limited SP - 402 EP - 418 Y2 - 2019/12/10 ER -