GDPR is a comprehensive data protection regulation implemented by the European Union (EU) to safeguard the personal data and privacy of EU residents. It sets guidelines and rules for how organizations collect, process, store, and transfer personal data.

Example

A company based in Germany must comply with GDPR requirements when collecting and processing personal data of its customers, ensuring proper consent, and data security measures, and providing individuals with rights to access, rectify, and erase their data.