The EU General Data Protection Regulation (GDPR) has received an unprecedented amount of attention over the course of the last two years. The GDPR, which will come into effect on May 25, intends to harmonise and strengthen the protection of personal data within the EU and respond to new trends in today’s digital society, such as big data analytics, data mining and profiling.