GDPR (General Data Protection Regulation)
The GDPR (General Data Protection Regulation) is the EU-wide regulation in force since May 2018 that governs how personal data is handled, obliging companies among other things to be transparent, to minimise data, to have a legal basis for each processing activity and to keep data appropriately secure.
In practice
For websites the GDPR touches practically every area involving personal data: contact forms, tracking, newsletter sign-ups or server logs. Breaches can attract fines of up to €20 million or 4 per cent of worldwide annual turnover, whichever amount is higher.