Force 2-factor authentication (2FA) for all users to comply with GDPR

Need this also