Which of the following best describes GDPR$?$

$1.$

GDPR is a regulation by the state of California that grants its residents data privacy rights.

$2.$

GDPR is a law by the European Union that provides policies and practices companies must follow to protect consumer data privacy.

$3.$

GDPR is a framework that protects consumer payment detail and is required for any organization that processes payments.

$4.$

GDPR is a global framework Developed by the Information Systems Audit and Control Association $($ISACA$),$ that bridges the gap between security processes and enterprise goals.