GDPR
European regulation protecting personal data and privacy of EU residents.
The General Data Protection Regulation (GDPR) is the European Union's primary data-protection law. It establishes lawful bases for processing, requires data-protection impact assessments, mandates breach notification within 72 hours, and grants data-subject rights including access, rectification, and erasure.