The Internet has revolutionized various sectors of the economy. And with its growth, it has become essential for the smooth running of daily functions. Current eras are often referred to as the "data era", which often leads to the separation of personal data when using various Internet services. With the exponential increase in the number of incidents of identity theft, unauthorized access and other similar violations have increased. Privacy concerns exist wherever personally identifiable information or other sensitive information is collected, stored, used and ultimately destroyed or deleted in digital form or otherwise. The data privacy challenge is using data while protecting individuals' privacy preferences and personally identifiable information. Say no to plagiarism. Get a tailor-made essay on “Why violent video games should not be banned”?Get the original essayThe right to privacy is a highly developed area of ​​law in Europe and all member states of the European Union are equally signatories to the European Convention. on human rights. An important piece of European legislation relating to privacy and human rights is the Data Protection Directive. This is a European Union directive adopted in 1995 that regulates the processing of personal data within the European Union. The General Data Protection Regulation (GDPR) adopted in April 2016 will replace the Data Protection Directive and will be applicable from May 2018. GDPR is a regulation by which the European Parliament, the Council of the European Union and The European Commission intends to strengthen and unify data protection legislation for all individuals within the European Union. It will also look into the export of personal data outside the EU. The GDPR mainly aims to restore control to citizens and residents over their personal data and to simplify the regulatory environment for international trade by unifying regulations within the EU. It does not require national governments to adopt enabling legislation and is therefore directly binding and enforceable, unlike the current directive which requires the adoption of legislation. The GDPR extends the scope of European data protection law to all foreign companies processing the data of EU residents. It also brings a new set of digital rights for EU citizens at a time when the economic value of personal data is increasing in the digital economy. The GDPR is the most important piece of European privacy legislation in the last twenty years, aimed at unifying data protection. laws across Europe. Under this regime, businesses must keep a detailed record of how and when an individual gives consent to the storage and use of their personal data. When someone withdraws consent at any time, their contact details should be permanently deleted, not just removed from a mailing list. The GDPR gives individuals the right to be forgotten. Privacy by design and by default is the cornerstone of GDPR. Confidentiality by design is a fundamental element in the design and maintenance of information systems and the way each organization operates. This requires that, from the earliest stages, the organization considers the impact that data processing may have on an individual's privacy. This means that everything, 34(2), 308-328.