The General Data Protection Regulation (‘GDPR’) is a piece of European Union law that will be enforceable from 25 May 2018. It will replace the current data protection regime set out by the Data Protection Act 1998, and brings in new rights – but also new responsibilities.

In May 2018 a new law will come into force which fundamentally affects the way that you use data to market, provide services and run your business