A regulation in EU law on data protection and privacy in the European Union and the European Economic Area.

"GDPR aims to give control to individuals over their personal data and to simplify the regulatory environment for international business."