The General Data Protection Regulation (GDPR) is a comprehensive data protection law that was enacted by the European Union (EU) to give individuals more control over their personal data. It aims to simplify the regulatory environment for businesses so both citizens and businesses in the EU can fully benefit from the digital economy. GDPR replaces the 1995 Data Protection Directive and came into effect on May 25, 2018.