A regulation in EU law on data protection and privacy for all individual citizens of the European Union (EU) and the European Economic Area (EEA).