To ensure this data is managed responsibly, companies are required to comply with data protection regulations, which are expected to include the European Union’s General Data Protection Regulation (GDPR).