On May 25, 2018, the European GDPR (General Data Protection Regulation) went into effect. During the selection process for Brightspace, security and GDPR compliance played a big role. On paper, the system is secure. The security of the system as a whole (including connections to other systems such as OSIRIS) is only as strong as its weakest link. For that reason, the Radboud University Digital Security group performed a security audit during the implementation process for Brightspace. The results of that audit were a determining factor for Brightspace's definitive acceptance as the new digital learning environment for the Radboud University.