The European Union’s (EU) General Data Protection Regulation (GDPR) is a comprehensive data privacy and security law that imposes an array of obligations onto organizations that target the European market and collect personal data related to people residing in the EU.