General Data Protection Regulation - What does the General Data Protection Regulation describe?

The General Data Protection Regulation (GDPR) stipulates that all data processing activities undertaken by any entity must be lawful. Furthermore, the data collected must be processed transparently and ethically, prioritizing the best interests of the data subjects. This implies that businesses cannot misrepresent their data processing intentions or processes.