The GDPR restricts how organizations can collect, use and retain personal data, and provides Europeans with certain rights to halt collection, and to obtain copies, correction and, at times, destruction of their data. https://www.securitymagazine.com/articles/88955-gdpr-will-your-company-be-fine-or-fined