GDPR is Europe’s new framework for data protection laws – it replaces the 1995 data protection directive. Previous UK law was based upon this directive.
The new legislation, which came in to force on 25th May 2018, is designed to harmonise data privacy laws across Europe. The new set of rules are designed to give EU citizens more control over their personal data as well as give greater protection and rights.