The General Data Protection Regulation (GDPR) came into force on May 25, 2018. Many EU and US businesses rushed to take measures to comply with the new requirements. The GDPR is still the strictest and most comprehensive privacy law in the world. With the GDPR, data protection has risen to the top of the agenda of many corporate boards.