General Data Protection Regulation (GDPR) is a European Union law on data protection and privacy. This law affects how companies handle personal data, requiring businesses to follow guidelines on how they collect and store this data.