The General Data Protection Regulation (GDPR) came into effect on 25 May 2018, replacing the Data Protection Act. The new law harmonises, strengthens and modernises data privacy laws across the EU and applies in the UK even post-Brexit, courtesy of the Data Protection Bill.