EU 2018 regulation on personal data protection. Requires consent, right to erasure, processing register.