To say that the General Data Protection Regulation will change the existing data protection framework in the EU is an understatement. After an intense legislative process of more than four years, the European Parliament, the Council of the EU and the European Commission have created an ambitious, complex and strict law that is set to transform the way in which personal information is collected, shared and used globally.