The General Data Protection Regulation (GDPR) took effect in the UK from 25 May 2018. Provides individuals more rights and protection in how their personal data is used by organisations.