GDPR has been described by some as being the most significant regulatory framework to hit companies since the Sarbanes-Oxley Act. With a stated objective to “give citizens back control of their personal data, and to simplify the regulatory environment for business”, it has impacted every single European individual who has shared their personal data with an organisation, and every single organisation that holds information on any European individual.