Failure to comply can result in heavy fines and even prosecution.
Personal data is information that can identify an individual, either directly or when combined with other data.
Names, e-mails, addresses, localisation, IP-addresses, photos, and account information all are directly identifying data.
Health information, income, religion and cultural profiles and the like is also personal data.
Furthermore, and crucial in the present context, data on user behaviour is also personal. Cookies can track and register individual users’ browsing activities, like what articles they scroll past and which ones they choose to click on.