The General Data Protection Regulation (GDPR) The General Data Protection Regulation (GDPR) is a regulation in the European Union law that protects an individual’s data and privacy inside and outside of the EU and EEA frontiers.