The General Data Protection Regulation (GDPR) will apply in the UK
from 25 May 2018. It will replace the 1998 Data Protection Act and
introduce new rules on privacy notices, as well as processing and
safeguarding personal data.