When the EU's General Data Protection Regulation (GDPR) went into effect in 2018, many organizations were left scrambling to comply with one of the strictest data privacy regimes yet. U.S.-based news outlets like The Chicago Tribune and LA Times even had to temporarily block access for EU users or risk steep penalties.