Data protection and privacy regulations such as the General Data Protection Regulation (GDPR) in the European Union and the California Consumer Privacy Act (CCPA) in the United States give individuals the right to govern how an organization uses their personal data.