GDPR (General Data Protection Regulation) establishes guidelines for the collection and processing of personal information of individuals in the EU, enhancing privacy rights.