The General Data Protection Regulation (GDPR) is an EU Regulation that grants EU citizens more control over their personal data. It applies to all businesses that market to people in the EU or process their data, regardless of where the business is based.