The General Data Protection Regulation (GDPR) is a data protection and privacy regulation enacted by the European Union (EU). It sets out rules and guidelines for the collection, processing, storage, and transfer of personal data of individuals within the EU.