The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. GDPR also addresses the transfer of personal data outside the EU and EEA areas. It aims to give control to individuals over their personal data and to simplify the regulatory environment for international business.