The General Data Protection Regulation (GDPR) is a European law that went into effect May 2, 2018 and establishes protections for privacy and security of “personal data” about individuals in the European Economic Area (EEA). Please note that GDPR considers “coded date” to be “personal data” even where one lacks access to the key-code/coding system