The General Data Protection Regulation (GDPR) is a privacy law introduced by the European Union in 2018. It sets strict rules on how organisations collect, store, and use personal data, giving individuals more control over their information. Non-compliance can result in hefty fines, making it crucial for businesses to follow these regulations.