On May 25, 2018, a European Union (EU) law called the General Data Protection Regulation (GDPR) went into effect. This law affects private and public organizations that collect, process, manage, and store the personal information of EU citizens. Therefore, the GDPR may affect higher education institutions in the United States.