The GDPR applies to people living in the EU (referred to in the provisions as “data subjects”) and any organizations who collect personal data from those individuals.
The legislation provides people living in the EU with control over the personal data they provide to organizations online. Any organization who collects such data must comply with GDPR’s specific requirements or face severe penalties.
Refer to the GDPR provisions or talk to your GDPR consultant for specific requirements.