The European General Data Protection Regulation (GDPR) came into effect on May 25, 2018, ushering in a new era of digital privacy across Europe. Although the legislation has been in place for almost a year, there are still many uncertainties and misconceptions around it, particularly among merchants based outside of the EU.