The General Data Prevention Regulation is a new law that has been enforced by the European Union since May 25, 2018. The goal of this regulation is to update the Data Protection Directive of 1995. It places an emphasis on the need to protect any and all collected data. The fines for violating the regulations set forth by the GDPR are huge. Serious infringements such as not having the right customer consent to process their data can net the violating company a fine of 4% of their annual global income, or 20 million Euros.”]
Source: https://hackercombat.com/what-does-gdpr-mean-for-your-organization/