This incoming regulation represents probably the most substantive and wide-reaching data privacy regulation in the world, and will have an immediate and significant impact on the operations and systems of every organization that intends to interact with EU residents when it comes into force. Organizations should be considering these requirements, or else they may have to choose between a marketplace of 500 million potential customers, or incurring the full powers and sanctions of the European Union.