The GDPR is a new EU based regulation the is dedicated to protecting your personal data and applies to any website owner or website that is serving people from and in the EU. The GDPR applies to data that personally identifies you.
The purpose of the GDPR is to ensure that the privacy of EU citizens is protected. It is to provide new ‘digital rights’ to consumers, and to secure consequences for the misuse of sensitive information.
The GDRP replaces a directive that is not up to date with technology evolving since 1995 and us using the internet all of the time, so the EU thought they would bring this law in.