A European data protection regulation governing how organisations handle the personal data of EU residents. Relevant to UAE businesses with European operations or customers.