A legal framework that sets guidelines for the collection and processing of personal information from individuals in the European Union (EU).