As of May 25, 2018, the GDPR regulates how organizations must protect the personal data of individuals living in the European Union. The GDPR covers all EU member countries: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, and Sweden. The GDPR also covers European Economic Area countries: Iceland, Lichtenstein, and Norway. Non-European Union organizations with offices in EU countries or companies that collect, store, and process EU citizens' data are still required to understand the regulation’s implications and stay in compliance.