The law will give EU citizens greater control over what happens to their personal data when businesses get hold of it. In effect, the law aims to strengthen consumer’s rights while setting standards for best practice.
When the new regulations come into force, businesses must get consent before they use the personal data of any private EU citizen. Come the deadline, businesses must be able to demonstrate compliance. Fines for non-compliance will be hefty to say the least. So, as of 25th May 2018, laxity will be out.