The General Data Protection Regulation (GDPR), also known as the European Union Data Protection Regulation, is a regulation which intends to stengthen data protection protocols for individuals within the European Union. The GDPR was enforceable by EU member states from 25 May 2018 - the UK government has confirmed that the UK’s decision to leave the EU will not affect its implementation. As it is a “regulation” rather than a “directive”, it will be directly applicable to all EU member states without the need for local legislation.

There are three core aims of the GDPR:

• to give individuals more control over their personal data
• to standardise the rules for reporting data loss and attacks for European countries
• to make transparency and accountability priorities for companies that deal with data.

Check out our GDPR content