One year and six months ago, the European General Data Protection Regulation (GDPR) came into effect. For the world - or at least businesses - life didn’t end on the 25.05.18, neither have we seen massive amounts of fines given to small and medium-sized companies after that date.
EU citizens will soon expect that their personal data will by default be processed more carefully, transparently and only for the purposes for which they provided their explicit consent. The General Data Privacy Regulation (GDPR) introduces many improvements to personal data protection. It doesn’t matter whether the service provider is physically located in EU area or not, or if the provided services are paid or free of charge. If the service is available to people within the EU and personal data is involved, the regulation shall be applied and personal data must be protected according to the GDPR.