GDPR is a data privacy and security law adopted by the European Parliament and the Council of European Union that went into effect May 25, 2018. The GDPR binds organizations to a set of rules and limitations in accessing, using, and securing personal data, and consequently provides individuals control over how their data are collected, used, and secured.