The General Data Protection Regulation (GDPR) comes from countries in the European Union to protect consumer privacy. Although the requirements and focused primarily on businesses in the EU, companies in the US and around the world will have to comply if they do business in or handle information from data subjects in the EU.
Companies that are found in violation of GDPR regulations could be fined 20 million euros or 4% of their global annual turnover from the previous year, whichever is greater.