The General Data Protection Regulation (GDPR)
The EU’s General Data Protection Regulation (GDPR) is the result of work by the EU to bring data protection legislation into line with new, previously unforeseen ways that data is now used. The GDPR came into force on Friday 25 May 2018.
Currently, the UK relies on the Data Protection Act 1998, but this will be superseded by the new legislation. It introduces tougher fines for non-compliance and breaches, and gives people more say over what companies can do with their data.