The General Data Protection Regulation 2016/679 is the European Union and the European Economic Area’s core data privacy and security law. It sets out the guideline for collecting and processing personal information from individuals in the EU.