The Data Protection Directive is an EU privacy law that was enacted in 1995 and dictated how personal information was to be processed and used. It was superseded by the GDPR in 2018.