The main focus of the GDPR is to provide European Economic Area (EEA) residents with more rights over the personal data that businesses collect about them.
The GDPR gives users these rights by requiring businesses to:
- limit their data collection.
- get consent from users to collect their personal data.
- allow users to request their personal data be deleted, edited, or transferred.
- provide transparent information about how they handle users’ personal data.