General Data Protection Regulation (GDPR) is a new set of regulations designed to give EU citizens and residents more control over their personal data. It’s been effective since May 25, 2018. Basically, it affects all businesses that collect personal information and consent of EU citizens and residents.