Failure to comply can result in heavy fines and even prosecution.
What is personal data?
Personal data is information that can identify an individual, either directly or when combined with other data.
Names, e-mails, addresses, localisation, IP-addresses, photos, and account information all are directly identifying data.
Health information, income, religion and cultural profiles and the like is also personal data.
Furthermore, and crucial in the present context, data on user behaviour is also personal. Cookies can track and register individual users’ browsing activities, like what articles they scroll past and which ones they choose to click on.
Most websites collect user data. Often, it happens without the website owner even being aware of it, by means of cookies.