The General Data Protection Regulation (2016), introduced into UK law under the Data Protection Act 2018 (DPA). Provides legal requirements for data protection and citizen privacy within the European Union (EU) and for data transferred outside the EU.