The GDPR defines the fundamental rules for the protection of personal data and promotes the free movement of the same in the European Union. Among the principles introduced by the regulation we find accountability, the obligation to obtain explicit consent for data processing, and amplified rights for interested parties, such as the right to access and data portability.