regulation enacted by the European Union in 2018 that codifies certain rights of EU internet users and certain responsibilities of businesses and other entities that collect and store those users’ data. GDPR is one of the first major bills of citizens’ rights on the internet and may become a global standard.