GDPR

General Data Protection Regulation; EU law that sets rules for collecting, processing, and protecting personal data. GDPR grants individuals rights over their data, including access, rectification, and erasure, and requires organizations to report breaches within 72 hours.