In practical terms, almost all websites are impacted by GDPR legislation, even if they have no physical presence in Europe and don’t actively target European customers.

Since May 25, 2018 organizations which collect or process the personal data of EU citizens must comply with GDPR. Personal data can be as benign as a cookie, IP address or email, and as almost all websites use these, almost all websites are affected.