General Data Protection Regulation (GDPR) is a comprehensive data privacy regulation enacted by the European Union to protect individuals' personal data and privacy. Implemented in 2018, GDPR establishes guidelines for how organizations collect, process, and store personal information, granting individuals greater control over their data. It requires businesses to obtain explicit consent, provide transparency, and implement stringent security measures. Non-compliance can lead to significant fines, making GDPR compliance a priority for organizations operating in the EU.