The EU’s General Data Protection Regulation (GDPR) goes online in May 2018. And while it’s an open question just how much impact the regulation will have on consumer technology, it’s likely many will have to adapt to this new regulatory regime.

The GDPR has strict rules on how technology providers’ services and products must handle the personal data of EU citizens, regardless of where they are located. For example, technology providers must respect a EU citizen’s “right to be forgotten” by removing all their personal data upon request. What’s more, organizations must inform EU citizens of how their personal data is captured, stored and used, and receive their clear and affirmative consent to retain or process the data.