The General Data Protection Regulation (GDPR) is designed to protect the privacy of individuals by regulating the collection, use, and storage of their personal data by organizations and the free movement of personal data within EU. This is what GDPR states in his 1st article.