The new GDPR legislation is enforceable on May 25th, 2018. It upholds the highest standards of data privacy, and applies to any website that collects data from EU citizens. This means if you’re running a website and at least some of your users reside in the EU, the GDPR applies to you.