The General Data Protection Regulation (GDPR) governs the processing of personal information gathered from individuals while they are in the European Union (EU) and parts of the EEA (European Economic Area, which currently includes Iceland, Lichtenstein and Norway)..