Explanation:

First option is correct.

GDPR seeks to create a harmonised data protection law framework across the EU and aims to give citizens back the control of their personal data, whilst imposing strict rules on those hosting and ‘processing’ this data, anywhere in the world.

The Regulation also introduces rules relating to the free movement of personal data within and outside the EU.