The GDPR is a European regulation that governs data protection and privacy. It affects any organization handling personal data of European Union citizens, including health data.