The General Data Protection Regulation (GDPR) is a legal framework that sets guidelines for the collection and processing of personal information from individuals who live in the European Union (EU).It’s designed as a central regulation (vs multiple previous ones) to give EU individuals increased control over how their personal data is being collected, processed, and stored in a globally connected digital world.