The European Unions General Data Protection Regulation (GDPR) is scheduled to come into effect in May of 2018. GDPR establishes the rights of EU citizens to control their personal data, while imposing new responsibilities on organizations to protect that data. The EU intends to enforce GDPR through a series of stiff fines, sanctions, and injured-party compensations. These fines range from up to 10 million, or 2% of an organization’s revenue for minor infractions, to 20 million.”]