GDPR sets strict new requirements for protection of personal data for EU residents, requiring all organizations that control and process PII to implement best in class technical measures to secure and prevent data breaches.