The General Data Protection Regulation (GDPR) is a European regulation that governs the collection, processing, and storage of personal data of residents of the European Union. Entering into force in May 2018, it imposes strict obligations on companies to guarantee the confidentiality, security, and protection of data. The GDPR also introduces mechanisms for obtaining the consent of data subjects and promotes data portability.