GDPR (UGC compliance)

In one sentence

The EU regulation governing personal data, including identifiable customer content. Commercial reuse of identifiable UGC requires documented lawful basis (in practice, explicit consent), and withdrawal must be honoured within roughly 30 days end-to-end.