An EU regulation, in force since 2018, that governs the processing and transfer of personal data of individuals in the EU/EEA, granting them privacy rights and imposing obligations and penalties on organizations that handle such data.