The GDPR is a data protection law from the EU, formally known as the General Data Protection Regulation. It places limits on and requirements for how personal data is collected and used. It also provides individuals located within the EU with a number of privacy rights, including the right to have their data deleted from a database.