The General Data Protection Regulation
2016/679 is a regulation in European Union (EU) law on data protection and privacy in the EU and the European Economic Area (EUA). It applies to any organization—regardless of its location and the data subjects' citizenship or residence—if it processes the personal information of individuals in the EU and EUA.