A European Union Directive regulating the processing of personal data within the European Union in which the previous Data Protection Act 1998 enacted. The GDPR has superseded this regulation.