The General Data Protection Regulation (GDPR) is a new EU regulation aimed at protecting the personal data of EU citizens. Since the term ‘personal data’ is so broad, the new regulation impacts almost every EU company, and any company that exchanges or collects data from those who reside within the EU.