General Data Protection Regulation (GDPR)

The EU adopts GDPR as a successor to the Data Protection Directive with further restrictions to the types of personally identifiable information that can be collected online. It specifically requires that websites disclose any data that has been collected and limits how long data can be held. It also enforces a way for users to request their personal data to be completely erased.