The General Data Protection Regulation (GDPR) is a landmark European Union law designed to safeguard individuals' personal data privacy. It enforces strict rules on data collection, storage, and processing, requiring organizations to obtain clear consent and ensure data security. GDPR empowers individuals with rights such as access, correction, and deletion of their data, promoting transparency and accountability across digital platforms.