General Data Protection Regulation
The European Union's sweeping privacy law that governs how organizations collect, process, and store personal data of people in the EU. It applies to any company handling EU residents' data, regardless of where the company is based. Violations can bring fines of up to 4 percent of global annual revenue, which made privacy a boardroom issue worldwide.