The General Data Protection Regulation (GDPR) has been in effect since 2018 and businesses and customers in Europe are slowly but steadily getting accustomed to the idea that personal data is a valuable resource and has to be treated accordingly.