The General Data Protection Regulation (GDPR) is Europe’s data privacy and security law. It was drafted and passed by the European Union (EU), and imposes obligations onto organizations anywhere, so long as they target or collect data related to people in the EU.
Official Document
Enforcement Scope
When Enforcement Takes Effect