GDPR stands for General Data Protection Regulation. It’s about the protection of personal data. Sending spam emails to private persons and chasing people on the internet just like that is a thing of the past.
Since May 2018, every company is obliged to comply with the rules regarding GDPR. If you do not comply with the rules, you risk (large) fines. That is of course a shame about your money.