The GDPR (General Data Protection Regulation (Regulation (EU) 2016/679)) is an EU data protection law. It supersedes the EU’s 1995 Data Protection Data Directive and all member state laws based on it, including the UK’s Data Protection Act 1998.
As a regulation, it applies across the EU with the same authority as if it were a member state law.
