After over four years of discussion, the EU’s General Data Protection Regulation (GDPR) was adopted on April 27, 2016 and became effective on May 25, 2018. The GDPR replaces the EU’s Data Protection Directive (95/46 EU) which has served as the main instrument of the EU for almost two decades. GDPR is directly applicable to all EU Member States without the need for implementing national legislation.