There are 5 main GDPR key elements that you need to be aware of. Right to access The right to require a confirmation from the data controller if personal data concerning the individual is being processed by the host. Data portability The right of user confirmation to transmit and receive personal data from the organisation or controller of the website you are viewing. This needs to be provided in a structured and commonly used machine readable format. The right to be forgotten This is also know as a data erasure right. It forces websites to erase personal data and stop further data population to advertisers, both internally and externally. Breach notifications Organisational websites must notify customers and controllers when there has been a data breach which is likely to result in a loss of rights and freedom for the individuals who data was stored on the website. Penalties Websites are not GDPR compliant can face up to 4% of the global turnover for the preceding financial year.