GDPR, which stands for General Data Protection Regulation, is a comprehensive data protection law implemented by the European Union (EU) that governs how organizations collect, use, and protect the personal data of EU citizens. Effective since May 25, 2018, GDPR aims to give individuals greater control over their personal information and to ensure transparency in data handling practices. Key provisions include requiring explicit consent for data processing, granting individuals the right to access and delete their data, mandating data breach notifications, and imposing strict penalties for non-compliance. GDPR applies to all organizations that process the personal data of EU citizens, regardless of where the organization is based, promoting a higher standard of data privacy and security globally.