Question

Is GDPR a law?

Answer 1

GDPR is a comprehensive privacy legislation that applies across sectors and to companies of all sizes. It replaces the Data Protection Directive 1995/46. The overall objectives of the measures are the same – laying down the rules for the protection of personal data and for the movement of data

see   

https://www.privacyshield.gov/article?id=European-Union-Data-Privatization-and-Protection