A law that imposes obligations onto any organization that collects, uses or retains data related to people in the EU and UK. It provides individuals with control over their personal information, such as requiring explicit consent to process their data.
