After four years in the making, the European Union’s General Data Protection Regulation (GDPR) received its legislative approval. The regulation will be going into effect on May 25, 2018, and provides a new set of rules to govern the processing of personal data, replacing the 1995 EU Data Protection Directive (“Directive”). GDPR is the law.