The General Data Protection Regulation (GDPR) is a comprehensive data protection law in the European Union. It requires marketers to obtain explicit consent from recipients before sending emails. Additionally, it grants individuals the right to access and delete their data. Non-compliance can result in severe penalties.