The GDPR is the European Union's data-protection law, in force since May 2018. It led registries and registrars to redact personal data from public registration lookups by default.