The General Data Protection Regulation (GDPR), went into effect on 25 May 2018, and introduces a clear and strict data privacy regulation. It applies to all companies and public sector bodies that control and process personal data about individuals in the EU, regardless of where a company is located.