regulation enacted by the European Union in 2018 that codifies certain rights of EU internet users and certain responsibilities of businesses and other entities that collect and store those users’ data.