GDPR (General Data Protection Regulation) is a law to be set in motion in May of 2018, and will apply to anyone handling personal data belonging to EU residents. But this has potential to serve as a foundation for legislation in other parts of the world, including the US.
Great article from our partners at Pipedrive:
https://blog.pipedrive.com/2018/03/gdpr-compliance/