The General Data Protection Regulation (GDPR), which became enforceable May 2018, is intended to increase data protection rights for persons whose personal information fall within its scope of application. It places added requirements and responsibilities on entities that handle that personal data, and grants comprehensive rights to users.