The European Union (EU) has introduced General Data Protection Regulation (GDPR) to protect the fundamental right to privacy of EU resident effective from 25th May, 2018. A stringent yet essential law to be enforced by EU is made to date on how EU citizens’ and residents’ personal data is lawfully collected, processed and stored. Applicable to all organizations who process EU residents’ Personal Data or have Business Arrangements with them to provide goods and services, the law gives the control back to the EU Residents over the usage of their personal data.