GDPR is a stringent set of security measures relating to how and where personal data is collected  handled and used Individuals can request to have their data deleted  see what data is held about them and provide consent as to how their data can be used