EU GDPR (General Data Protection Regulation) is one of the latest framework enacted to secure personally identifiable information belonging to European citizens. The regulation framework provides a set of mandatory security and privacy requirements that organizations in different parts of the world must implement. As such, it is a global framework that protects the data of all EU citizens. Non-compliance leads to huge penalties, and this has caused most companies to comply with the requirements. GDPR requirements include implementing suitable controls for restricting unauthorized access to stored data. These are access control measures such as least privilege and role-based access controls, and multi-factor authentication schemes. Organizations or websites must also acquire a data owner’s consent before they can use data for reasons such as marketing or advertising. Data breaches that result from a company’s inability to implement security controls amounts to non-compliance.