Almost three years have past since the General Data Protection Regulation (EU) 2016/679 (the “GDPR”) has entered into force. The GDPR is a European Union law that was implemented in May 2018, replacing the 1995 Data Protection Directive. It is essentially the bedrock of data protection and personal privacy rights and its main goal is the facilitation of a standardized legal framework that regulates and harmonizes the way personal data is safeguarded and upheld by organizations across the European Union (the “EU”).