GDPR stands for the General Data Protection Regulation, a data protection regulation issued by the EU. It came into force in 2018, and its purpose is to strengthen the protection of EU citizens’ personal data. When the regulation took effect, the previous EU directive ceased to apply. The EU regulation applies directly to all member states and therefore does not need to be implemented through new national legislation.