General Data Protection Regulation

GDPR has applied since May 2018, and the UK kept its own version of it after Brexit. For creators it bites in ordinary places: an email list, a giveaway entry form, a Discord with member records, analytics that identify individuals. The obligations are the dull ones. Have a lawful basis for holding the data, say plainly what you will do with it, keep it no longer than you need it, and be able to delete somebody's record when they ask you to. It applies according to where the subscriber lives rather than where you live, so a US creator with British subscribers sits inside it.