The General Data Protection Regulation (GDPR), in effect since May 2018, regulates the processing of personal information within the European Union. Its objective is to harmonize the standards in force across Europe by providing a unified legal framework for businesses. This regulation aims to foster the development of online activities within the EU based on user trust. In France, the GDPR builds upon the 1978 Data Protection Act and strengthens citizens’ control over the use of their personal data.