The General Data Protection Regulation (GDPR) focuses on data protection and privacy for individuals within the EU. Non-compliance can lead to fines up to €20 million or 4% of the annual global turnover of the preceding financial year, whichever is higher. GDPR mandates that organizations must obtain explicit consent before sending marketing emails and provide an easy way for recipients to withdraw consent.