The General Data Protection Regulation (GDPR) is Europe's framework for data protection laws – it replaces the previous 1995 data protection directive, which current UK law is based upon.
It was designed to harmonize data privacy laws across Europe, to protect and empower all EU citizens' data privacy and to reshape the way organizations everywhere approach data privacy.
It comes into full effect on 25 May 2018.