From 25 May 2018, GDPR will affect the whole of the EU covering half a billion citizens. Its goal is to unify data protection across the EU, but because GDPR applies to individuals within the EU or the European Economic Area (EEA), companies outside these zones will still have to meet the standards if they want to continue using data from customers in the EU.