The General Data Protection Regulation (GDPR) is a regulation in the European Union (EU) that outlines the rights of individuals and the obligations of organizations that control or process personal data. The GDPR was adopted on April 27, 2016, and became enforceable on May 25, 2018.