A regulation in EU law on data protection and privacy in the European Union and the European Economic Area.
Why it matters: Violations carry massive fines. Has fundamentally shifted how startups handle cookies and user data.
In practice: Adding a cookie consent banner and a 'delete my account' button to comply.