The European Union's General Data Protection Regulation (GDPR) is a comprehensive and far-reaching data privacy statute that covers all entities collecting and processing data in Europe. The GDPR prohibits those entities from unlawfully transferring that data to third parties, even in connection with a litigation in a United States court. Volume XLVII staff member Matthew Classi characterizes the dilemma US federal courts face in compelling litigants to produce European-sourced data in pretrial discovery, potentially exposing them to significant liability.