Question: Which of the following is false regarding the General Data Protection Regulation (GDPR)? Multiple Choice Firms that violate the GDPR can be fined the lesser amount between 10 million Euros or 2 percent of annual revenue. It prohibits companies from gathering, keeping, and communicating personal data about individuals without valid legal grounds or a data subject's explicit consent. It applies to EU-based businesses. It applies to United States firms doing business in the EU. It is a European Union (EU)-wide law.