The General Data Protection Regulation (GDPR) legislation sets requirements related to data protection and privacy for all individuals within the European Union and the European Economic Area.
The aim is to ensure that personal data is handled in a standard secure way across all industries.
For more information, see UK GDPR guidance and resources.