The General Data Protection Regulation, commonly known as the GDPR, has been in force since 25 May 2018. The regulation regulates the provisions on the protection of personal data relating to natural persons. The aim of the regulation is to achieve full harmonization of law within the EU and the free flow of personal data. It is intended to allow residents of the European Union to have better control over their personal data and to modernize and unify regulations, allowing companies to reduce bureaucracy and benefit from increased customer trust. The regulation updates the regulations so that they fulfill their function in the 21st century and respond to threats resulting from the use of modern technologies in the processing of personal data.