General Data Protection Regulation (GDPR) is a European Union (EU) law that protects individuals' privacy and security.