The General Data Protection Regulation (GDPR) is a policy concerned with protecting personal information of all citizens of European Union member states.