If you do databases and user data, you need to deal with GDPR.
“Everything you need to know about EU GDPR (European Union’s General Data Protection Regulation) in order for your organisation to become compliant.”
Source: EU GDPR Compliant – General Data Protection Regulation – Home