Businesses and other organizations are required to protect and respect the personal data of their European Union customers by ensuring that the information collected was obtained legally and with the consent of the customer. In addition, the business ensures that the personal information gathered will not be misused or exploited. The following sections outline some of the basic requirements of GDPR.