General Data Protection Regulation
The General Data Protection Regulation (GDPR) (Regulation (European Union) 2016/679), adopted on April 27, 2016 and taking effect May 25, 2018, is a regulation approved by the European Parliament, the Council of the European Union and the European Commission which strengthens the protection of people's personal data throughout the European Union (EU). The decree also affects data exports from the EU.
The GDPR is aimed at giving citizens control over their personal data and simplifying regulations for economic relations with other countries by unifying these procedures within the EU. The GDPR will replace the "Data Protection Directive" that took effect in 1995. As the new GDPR law doesn't require any changes in local laws within the EU, the regulation is binding.
People and companies who don't comply with the GDPR law may face a fine of up to 20,000,000 euros, or up to 4% of the company's profits from the previous year, whichever number is higher.