As of May 25, General Data Protection Regulation is the law in the European Union. Any corporation that stores or captures private date of European data subjects must comply with the law. Marketing teams often store personal data for individuals as part of the effort to get the word out about products or services. It is important that individuals are notified that you are capturing and storing their private information including email addresses and that they have the option to have you remove this information. The EU has finally determined that it is okay to mention Pete Green in the audit log as the person whose personal details you removed from your main systems.”]
Source: https://www.csoonline.com/article/3280099/gdpr-is-live-now-what.html