The General Data Protection Regulation (GDPR) is the most far-reaching privacy law in effect today. Though it is an EU regulation, its impact is global. Any organization that markets to, collects leads from, or processes data belonging to residents of the European Union must comply with GDPR—regardless of where the organization is located.