The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect in the European Union (EU) in May 2018. It aims to strengthen data protection and privacy for individuals within the EU and the European Economic Area (EEA), as well as address the export of personal data outside these areas.