The European Union's General Data Protection Regulation (GDPR), which will come into force on May 25, 2018, is European in scope but with global implications. In an effort to protect personal data against unauthorized access and tampering, it strengthens the rights of individuals (such as the right of access, right of rectification, and right to be forgotten) and sets up new obligations for businesses (such as setting up a register of personal data processing, responding to requests from individuals, and data security and confidentiality measures).