European Union’s General Data Protection Regulation (GDPR). The GDPR not only regulates what you can collect, but how soon you need to report a data breach. This applied to any organization with business ties to the EU. That’s pretty much any online service you use and most likely the company that cuts your checks. The cost of non-compliance is some hefty-ass fines of up to 20 million Euros or 4% of your annual global turnover. Whichever is higher.