GDPR

The General Data Protection Regulation is the EU's comprehensive privacy law effective since May 2018, applying to any organization that processes personal data of EU residents, regardless of where the organization is located. Maximum fines reach €20 million or 4% of global annual revenue.