Recent data scandals like Cambridge Analytica have heightened the need for good data protection frameworks. To address this need, the European Union adopted the General Data Protection (in short GDPR) with the aim to protect the personal data, fundamental rights and freedoms of European citizens. This article explores the ways in which the GDPR has improved the standard of data protection and ensures that data privacy issues are adequately addressed these days. Moreover, it will assess the principle of the GDPR and examine the rights of data subjects.