The General Data Protection Regulation (GDPR) is a regulation in the European Union (EU) and European Economic Area (EEA) regarding data protection and privacy. It also addresses the transfer of personal data outside the EU and EEA areas.