The General Data Protection Regulation (GDPR) is a regulation implemented by the European Union to protect the personal data and privacy of individuals within the EU and the European Economic Area (EEA). It also addresses the transfer of personal data outside these regions.