GDPR is a legal framework that sets guidelines for the collection and processing of personal information from individuals who live in the European Union (EU).