It has been a long road. But, the EU's General Data Protection Regulation (GDPR) is now in force.
In a nutshell, if you are offering goods or services to people in the EU, or you are monitoring people who are in the EU, then you are covered by the GDPR. GDPR Art. 3(2).