The GDPR has signified the importance and value that online personal data holds and established strict criteria for data collection and processing. Failure to comply can cost companies dearly.