is there 2-step verification in case somebody logs in from a different device?
The European Union's GDPR requires that we provide notice in a specific way to our European users about their privacy rights.