In Europe, 2018 has been off to a busy start in terms of regulation, with major changes that affect a broad range of industries, including the financial sector. First, in January, the second payments services directive came into force, while the new general data protection regulation (GDPR) will kick into force in May 25. Although the connection between both regulatory initiatives may not be evident, they pursue common goals: To allow citizens to control their personal data and increase security.