The EU General Data Protection Regulation. For websites, this primarily means: collecting data sparingly, obtaining consent before loading non-essential services, and being transparent about what happens to the data.