The GDPR protects citizens in the European Union. The regulations apply to any company that does business with people in Europe. The establishment of the GDPR in Europe also spurred other legislation across the world, including the California Consumer Privacy Act (CCPA).