A recent Facebook commercial talks about how great Facebook was when it first came into our lives. It then talks about how bad Facebook became recently (“fake news,” “spam,” and “data misuse”). It ends with Facebook promising to do more. It promises Facebook will do more to “protect your privacy.” Although Facebook is one of the most recognizable organizations embroiled in a personal data misuse controversy, it is not the first one and will not be the last one.

As information technology has advanced, it seems every industry has found a way to incorporate the collection and use of personal data from users and consumers, from advertising to health care. In the process, some collect and use personal data openly while some do so not so openly. The European Union (EU) has historically been more concerned about this practice than the United States, and so not surprisingly, the latest new regulation relating to personal data comes from across the pond.

What Is the GDPR?