The general data protection regulation is a directive in EU law on privacy and data protection. It also depicts the transfer of personal data outside of the EU. The general data protection regulation can control to an individual over their personal data. GDPR simplifies the authoritarian atmosphere for international commerce by unifying the directive within the EU.