GDPR is aimed primarily at giving citizens control over their own personal data and at simplifying the regulatory framework for international economic relations by unifying regulation within the EU.

The General Data Protection Regulation (GDPR) standardizes data protection law across all 28 EU countries and imposes strict new rules on controlling and processing personally identifiable information (PII)