• The General Data Protection Regulation is a law that sets out rules for the collection and processing of personal information from individuals.

  • The law was approved in 2016, but came into force only in May 2018.
  • The GDPR gives consumers more control over how their personal data is processed and shared by companies.
  • Companies must inform consumers about what they do with consumer data and every time it is hacked.
  • The GDPR rules apply to any websites, no matter where they are located.