A European Union law that provides consumers with rights over their data, including the right to access, correct, and delete it. The law requires companies to obtain clear consent before collecting data and imposes stiff punishments for violations.