The European Union's comprehensive data protection law, in force since May 2018, which establishes rights for EU residents including the right of access, right to erasure, right to data portability, and right to object to automated decision-making. The GDPR's extraterritorial reach and substantial p