What is the GDPR or General Data Protection Regulation?
It is a European Union (EU) regulation on data protection and privacy that applies to all organisations processing the personal data of EU citizens. In the UK, it replaces the Data Protection Act (1998) and comes into force on 25th May 2018.