# What is GDPR?

> General Data Protection Regulation

It is a comprehensive set of legal rules that determine how personal data will be protected.

## Overview
It is a regulation that gives users rights regarding the collection, storage and processing of your personal information on the internet. It requires companies to explain why they collect your data and delete it when you request it.

*Analogy: It's like a legal lock that establishes privacy rules that prevent a hotel from entering your room and going through your belongings.*

## How it works
Institutions must obtain explicit consent for the data they collect and ensure the security of this data. In case of violation, companies face serious penalties.

## Where it is used
It is valid on all digital platforms that process the data of European Union citizens.

## Commonly confused with
It is confused with just a 'cookie notice', but this is a much more comprehensive data security law.

## Frequently asked questions
**How does it protect me?**
It prevents your data from being sold without permission and allows you to have your data deleted with the 'right to be forgotten'.

**Is it only valid in Europe?**
It binds all companies worldwide that do business with EU citizens.


## Related terms
- [Data Residency](/en/dictionary/data-residency/)
- [End-to-End Privacy](/en/dictionary/end-to-end-privacy/)
- [Security Scanner](/en/dictionary/security-scanner/)

---
Source: TreScout Dictionary · https://trescout.com/en/dictionary/gdpr/