The GDPR regulates the collection and processing of personal data. Not just cookies, not just tracking scripts, but any information about me that an organisatio

The GDPR regulates the collection and processing of personal data. Not just cookies, not just tracking scripts, but any information about me that an organisation chooses to collect or store. It is important and popular legislation that has significant implications outside of the browser. A straightforward example is the current trend for consumer DNA testing. In the US, companies like 23andme or Ancestry.com can send you a cheek swab kit, charge you a hundred bucks to find out some trivia about your health or genealogy, then do pretty much anything they like with your genetic data thanks to some vaguely-worded terms of service and a lack of meaningful regulation. In the EU, those companies can only use your genetic data for explicitly stated purposes with the informed consent of the consumer; the consumer has the right to withdraw their consent at any time, to request a copy of all information held on them or to request deletion of their data.