If your company does business in the EU, or has users within the EU then the GDPR kicks in.

The legal department would care about that.