A comprehensive EU data privacy and security law that governs how organizations collect, store, process, and share personal data, granting individuals rights over their data and imposing strict penalties for non-compliance.