The Data Protection Act 1998

All businesses are currently subject to the requirements of the Data Protection Act 1998 (DPA).

The General Data Protection Regulation (GDPR)

The legislation for this was adopted last year and is expected to be implemented in May 2018.