In March 2014 the European Parliament passed the General Data Protection Regulation (GDPR). This places an obligations on companies anywhere in the world that store and process data held on EU citizens.
Nearly every commercialised website you visit on the web is selling information about your visit to data marketing companies. Anyone with enough cash can buy this information: seeing the websites you visit, building a profile of your habits, lifestyle and politics. Both the EU and US are making moves to legislate around this issue and its impact on their citizen's privacy, but it's laughably disconnected.
