Data privacy is protected under the General Data Protection Regulation (GDPR) through a framework that mandates transparency and consent for data collection and usage. Organizations must inform individuals about how their data is processed, allowing them to make informed choices. GDPR empowers users with rights such as data access, rectification, and the ability to request deletion of their personal information. It holds companies accountable for data breaches, imposing heavy fines for non-compliance. This regulation promotes a culture of data protection, ensuring individuals’ privacy rights are respected in an increasingly digital world.