As of the 25th of May 2018, all companies worldwide that store and process data about EU citizens will be required to comply with GDPR. Potential fines for non-compliance can range from 2-4% of a company’s annual global revenue or amount up to 20 mil EUR, whichever is higher.