Information privacy, aka. data privacy or data protection, is the protection of personal information from illegal and unethical collection and processing. Privacy is eroded as personal information is increasingly being shared across social networks, websites, and mobile apps. The social web does not provide free services, in fact we pay for it by sharing our personal information, or said differently, through the loss of our privacy. In turn, Big Tech social networks leverage this information for profit. As individuals, we have little power to protect our privacy in this arena, only regulation accompanied with strong enforcement can bring a degree of fairness. In fact, information privacy is regulated by various laws and regulations around the world, such as GDPR in the EU. The extraterritorial scope of GDPR means that it applies not only to organizations based in the EU but also to any organization that processes the personal information of EU citizens, regardless of the organization’s location. This has led many non-EU countries to align their information privacy laws with GDPR principles to ensure compliance when processing information of EU citizens.