In Europe, an individual’s right to the protection of personal data is a fundamental right.   The E.U. General Data Protection Regulation (“G.D.P.R.”) takes effect on May 25, 2018, to protect that right.  The G.D.P.R. is notable because it applies to all companies processing personal data of persons residing in the European Economic Area regardless of the company's location and irrespective of whether the company has a physical presence in these countries.  Severe penalties are provided for violators. Fanny Karaman and Beate Erwin provide a layman’s guide to the G.D.P.R.