The General Data Protection Regulation (GDPR) is a European law that went into effect May 2, 2018, and establishes protections for privacy and security of “personal data” about individuals in the European Economic Area (EEA). Please note that GDPR considers “coded date” to be “personal data” even where one lacks access to the key-code/coding system