The general data protection regulation (GDPR or EU-GDPR) is a regulation of the European Union. It regulates the handling of personal data (direct identifiers, quasi-identifiers, sensitive information). Together with the German Federal Data Protection Act, it forms the legal background for the anonymisation of research data and stipulates that the transfer of data from scientific research projects to third parties must be anonymised in such a way that no reference to the person can be made.