A set of legal frameworks that regulate the collection, handling, and processing of personal data by organizations.