The EU’s General Data Protection Regulation (GDPR) comes into effect 25 May 2018. With fines up to €20 million, or 4% of annual revenue, for non-compliance, breaches, and misuse, website owners need to make sure they are compliant as soon as possible.