GDPR stands for General Data Protection Regulation. It is a data privacy law that all companies in the European Union must comply with when processing personal information.