The General Data Protection Regulation (or GDPR) is a new regulation  developed by the European Union (EU) which involves the protection and free movement of personal data and the rights of individuals, including children. It is a  set of rules which will replace the existing Data Protection Directive (Directive 95/46/EC), and will be enforced across the EU. GDPR will empower EU citizens by putting them directly in control of how they want their data to be processed, and will protect their data privacy.