The General Data Protection Regulation, or GDPR, is a regulation in EU law on data protection and privacy went into effect on May 25, 2018. The GDPR regulates how individuals and organizations may collect, use, and retain personal data, and addresses the export of personal data outside the EU.
More about this regulation: https://ec.europa.eu/info/law/law-topic/data-protection_en