GDPR is the European Union’s general data privacy regulation that helps change the way data is collected, processed and stored by organisations worldwide. The law applies to businesses that function within the European Union, and businesses that function outside of it. It is a law to protect and empower data privacy and to ensure organisations reshape their approach to data privacy.