As one of the leading high-end clothing retailers in Serbia, Fashion Company routinely deals with processing the personal data of EU citizens. The EU General Data Protection Regulation had introduced strict security requirements to such processing, and non-compliance could result in a steep fine (up to €20 million or 4% of annual turnover).