The general data protection regulation was enacted on May 25, 2018, introducing the data transformative era in data protection legislation within the European Union and European Economic Area. It replaced the previous data protection directive 95/46/EC, representing the substantial advancement in safeguarding individual privacy rights and enhancing data protection across the EU and EEA.
The GDPR (General Data Protection Regulation) outlines fundamental principles guiding the handling of personal data within the European Union and European Economic Area. These principles stress transparency, fairness, and accountability. Organizations must collect only relevant data, ensuring accuracy and restricting usage to specified purposes. Moreover, GDPR emphasizes data minimization, limiting unnecessary data collection. Furthermore, organizations must prioritize maintaining the integrity and confidentiality of personal data by implementing robust security measures to prevent unauthorized access, disclosure, or alteration.
 Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, The Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, United Kingdom
 Albania, Belarus, Bosnia and Herzegovina, Kosovo, Moldovia, Montenegro, North Macedonia, Russia, Serbia, Turkey, Ukraine