The General Data Protection Regulation (GDPR) is the EU regulation on data protection and privacy in the European Union (EU) and the European Economic Area (EEA).