GDPR

Short answer

The GDPR, or General Data Protection Regulation, is the European Union's law governing how organizations collect, use and store personal data, applicable since May 2018. It requires a lawful basis such as consent, grants individuals rights over their data, and applies to any company handling EU residents' data. Fines reach 4 percent of global annual turnover.