GDPR can apply to you if you do business from a location anywhere within the EU or if you have customers who are EU citizens. In those circumstances, you must obey this law or you can be fined 4 percent of your annual revenues or approximately $25 million, whichever amount causes you the most pain.