The General Data Protection Regulation (GDPR) is a comprehensive data protection and privacy law enacted by the European Union in 2016. The GDPR aims to give individuals greater control over their personal data and imposes strict obligations on organizations that collect, process, or store personal data of EU citizens, regardless of the organization’s location. It establishes principles, rights, and requirements for data protection, security, and accountability, with significant penalties for non-compliance.