The General Data Protection Regulation (GDPR) is a comprehensive legal framework that governs the collection, processing, and protection of personal data of individuals within the European Union (EU) and the European Economic Area (EEA). Enforced since May 25, 2018, GDPR aims to enhance data protection and privacy rights for EU citizens while streamlining regulations for businesses operating within the EU market.