While the EU’s General Data Protection Regulation (GDPR) has no bearing on HIPAA compliance, it does add a new set of rules for Covered Entities and Business Associates who gather, process, share, or organize data on EU citizens – for example, if an EU citizen seeks medical treatment in the United States.