The General Data Protection Regulation (GDPR) is a European law that governs personal data privacy and protection.