You may want to look into the EU GDPR, which requires all companies to strictly manage all personal information, or face a penalty of up to 5% of worldwide turnover.

This is set to activate in a year, and it is a huge problem for software used in the EU because almost nobody is ready for it.

https://en.m.wikipedia.org/wiki/General_Data_Protection_Regu...