The European Parliament has voted on the biggest shake-up of data protection laws for 20 years.
The data protection regulation's stated aim is to give citizens back control of their personal data as well as simplifying the regulatory environment.
It could mean huge fines for companies that breach the law and offer some complex problems about how they store, delete and return data to citizens.
Here is a quick guide to what is involved.
Why was change needed?
It is a modernisation of data protection laws drawn up in 1995, before mass internet adoption.
Four years in the making, the new laws' stated aim is to strengthen the rights individuals have over their data and make companies take the issue of data protection far more seriously.
