The General Data Protection Regulation (GDPR) is a comprehensive data protection law implemented by the European Union in May 2018. The regulation is designed to protect the privacy and personal data of EU citizens, regardless of where the data is processed. It affects various sectors, including healthcare and cancer research.