GDPR

/ˌdʒi-di-pri/

n. “Your data, your rules, enforced globally.”

GDPR, short for General Data Protection Regulation, is a sweeping data privacy law enacted by the European Union in 2018. Its purpose is to give individuals control over their personal data and to standardize how organizations across the EU—and those interacting with EU citizens—handle that data. GDPR transformed data protection from a local compliance task into a global operational concern, redefining the relationship between organizations and the personal information they process.