GDPR is a law by the European council to protect the digital privacy rights of European citizens living within and outside of the EU region. To comply, businesses have to abide by a set of rules and regulations. The GDPR brings the power back to the user and enables the user to decide how their personal data is processed.