The European Union’s General Data Protection Regulation (“GDPR”) marked a turning point in privacy and data protection practices globally and transformed how American companies approach the protection of personal data. Because of the large potential fines and complexity of the GDPR, American companies devoted significant resources to developing privacy and compliance programs to prepare for the effectiveness of the GDPR in 2018. GDPR has also proven to be an inspiration for comprehensive privacy laws that have been adopted and proposed in the United States.