The General Data Protection Regulation (GDPR) governs data protection and privacy in the European Union and the European Economic Area. The goal is to enable the safe and open flow of data across EU borders, as well as to safeguard all EU citizens from data breaches and privacy violations. The GDPR aims to provide citizens and residents more control over their personal data while also simplifying the regulatory environment for international business by consolidating EU regulations. The GDPR broadens the scope of EU data protection legislation to include all international enterprises that process personal data of EU citizens.