The General Data Protection Regulation (GDPR) comes in to effect on 25 May 2018. It will replace the current European legislation (the Data Protection Directive) and the UK equivalent - the Data Protection Act 1998 (DPA). It will affect all companies that handle EU citizens’ personal data, even if the company is not based in the EU. GDPR aims to make the rules for data collection and processing (where it goes, what it’s used for, and who else has access to it) consistent acro