The GDPR (General Data Protection Regulation) is the European regulation governing the processing of personal data. It requires in particular a legal basis, a specified purpose, minimization, a limited retention period, and security, and gives individuals rights such as access, rectification, and erasure.