The General Data Protection Regulation (GDPR) is a legal framework established by the European Union (EU) to protect the personal data and privacy of individuals within the EU and the European Economic Area (EEA). It addresses the export of personal data outside these regions and aims to give individuals control over their personal data.