GDPR is a comprehensive European Union regulation that sets rules for the collection, processing, and protection of personal data of EU citizens, aiming to enhance data privacy and control for individuals.