General Data Protection Regulation (GDPR) is a legal framework that requires businesses to protect the personal data and privacy of European Union citizens. Essentially, GDPR is a set of rules designed to give EU citizens more control over their data.