GDPR (General Data Protection Regulation)
Legal
The European Union’s comprehensive data-protection law, effective May 25, 2018. Reaches U.S. firms that offer goods or services to people in the EU or monitor their behavior. Notable for its extraterritorial scope, broad rights catalog, and fines of up to 4% of global annual turnover.