The General Data Protection Regulation (GDPR) was brought into UK law as of May 2018. It improves our current data protection legislation (Data Protection Act 1998) and the rights of individuals to control the data held about them. The GDPR also asks organisations to be more transparent about the data they collect and how they use it.