The General Data Protection Regulation or GDPR is a regulation that since its application in 2018 affects all companies in all sectors that operate in Europe, as well as when the company has its headquarters and its website outside the EU but offers goods and services in European territory, thereby processing the personal data of EU citizens.