Any company having business in the EU, residents’, or citizens’ data MUST comply with the GDPR.