It has been almost a year since the European Union (EU) implemented the General Data Protection Regulation (GDPR). Put in place to help regulate how businesses gather, store, protect, and share data from citizens of the EU, the GDPR is working to further improve data protection and consciousness among many organizations outside of just Europe. Since May, the number of complaints about data breaches has steadily increased, and privacy is now seen as more of a human right than in the past. It seems that under these stricter sanctions, data protection is moving in the right direction. However, the recent news of Google’s data abuse fine is bringing to light the demand for companies to better understand what changes need to be made under the GDPR. In order to continue the progression towards better data protection, organizations worldwide must either start educating themselves on how to comply with the regulations or further improve their own data collection procedures and put the privacy of their consumers first.