The GDPR establishes rules for processing personal data in the EU or the personal data of EU citizens and promotes the free movement of personal data within the EU. With enforcement actions, new guidelines, international data transfers, and global development of privacy laws and regulations, organizations had to develop data policies and mature their programs, so that they keep up with the rapid pace of these changes.