GDPR is applicable for internet service providers that have clients from European Union. It mostly made stricter the privacy and security of the client's data that you collect and store. There is also the need to inform the clients on how their data is stored and where it is used. If you need more information, I recommend checking here.