Zalando interview question

How does GDPR protect data in an organization?