Enacted in May 2018, the General Data Protection Regulation (GDPR) is the European Union's latest data privacy and security law. The GDPR establishes data protection as a fundamental right to UK & EU based users and includes numerous protections covering the use, storage, confidentiality, and transfer of personal data. The fines for violating the GDPR are severe, maxing out at €20 million or 4% of global revenue (whichever is higher).