GDPR stands for General Data Protection Regulation and is the new European Union Regulation (introduced in 2018) which replaced the Data Protection Directive and the UK Data Protection Act 1998. The purpose of the GDPR is to give EU citizens more control over their personal data, privacy rights and security plus added control over how companies use their personal data.