What a world is coming? GDPR, of which everyone should know

Since May 25, 2018, fundamental changes will have to be made in the field of digitally managed data. This means, that any company, organization, institution, office or nonprofit organization has to change their practice by then. However, it seems that many of them do not perceive the weight of the tasks, and there are a few who have not learned about it. But it was two years since May of 2016 for the preparation. But nowadays everyone is talking about it. In this paper, we would like to think carefully about what is the General Data Protection Regulation (GDPR) and why is it so important from IT perspective? The GDPR, regulations on the protection and the free movement of such data, personal data, constituted by the European Union. GDPR has direct effect and is mandatory in all Member States. After it has entered into force, this regulation is the most important rule in the treatment and protection of personal data in all member states, except when the GDPR permits itself. The sharp practice however, also leads to a high level of fines for those who do not comply with the rules, right from the first time. And it's easy to make mistakes. Even collecting old business cards or retrieving photos in searchable form can result in punishment. There are many questions, uncertain answers, and many situations seem unsolvable. For example, storing alumni students' information in an educational institution, or if there is no privacy policy at all..