The General Data Protection Regulation, or GDPR, is a set of regulations that member states of the European Union must implement in order to protect the privacy of digital data. The regulation was introduced in May 2018, and it requires businesses to take steps to safeguard the personal data of EU citizens.