Higher education institutions have typically a multifaceted mission. Besides their educational activities, they also aim to support research activities and provide collective services while ensuring that the institution breaks-even financially (as a non profit organization). These varying domains can actually be translated in a set of strategic objectives that need to be achieved in the long term. At the same time, new IT developments and projects can contribute to (or occasionally hamper) the realization of an institution’s strategy. Such IT developments suggest indeed new functions that could potentially support the individual achievement of one or many of the institution’s long-term strategic objectives. This article depicts a conceptual model evaluating the business and IT alignment of a Belgian university college from the French community with the assessment of the strategic fit of a new GDPR implementation (IT) project serving as case study. The purpose of the case is twofold as it aims to illustrate the generic strategy of this organization and to show secondarily how the alignment between the GDPR implementation project and that strategy can be identified, represented and evaluated. Finally, the case suggests that the realization of specific project objectives contributes positively to the realization of the university college’s broadly-based strategic objectives.