The General Data Protection Regulation (GDPR) is a comprehensive data protection law enacted by the European Union to regulate the collection, processing, and transfer of personal data. It was approved in April 2016 and became enforceable on May 25, 2018