The General Data Protection Regulation (GDPR) is the European Union comprehensive data privacy law that governs how organizations collect, process, store, and transfer personal data of EU residents. It applies to any organization worldwide that processes EU resident data, regardless of where the organization is located. GDPR grants individuals rights including data access, erasure, portability, and consent withdrawal. Non-compliance penalties can reach up to 4% of annual global revenue or 20 million euros, whichever is higher. — Browse 18 verified solutions.