The GDPR was designed to harmonize data privacy laws across Europe to protect citizens’ personal data and stand on a united front regarding every organization’s approach to safeguarding the processing of personal data. It was approved on April 14, 2016 and has been enforced as of May 25, 2018.