# GDPR The General Data Protection Regulation (GDPR) is a comprehensive data protection law enacted by the European Union in 2018 that establishes strict rules for how organizations collect, store, and process personal data. It grants individuals rights including data access, deletion ("right to be forgotten"), and informed consent, with significant fines for violations. GDPR represents the most ambitious regulatory response to [[Surveillance Capitalism]] and has become a global benchmark for [[Privacy]] legislation. Its extraterritorial reach means that [[Big Tech]] companies based in [[Silicon Valley]] must comply when handling EU citizens' data, making it a key battleground in debates over technology regulation and corporate accountability.