The General Data Protection Regulation is a law passed in the European Union that is a set of rules to give EU citizens more control of their personal data online.