.. I get asked this question most of the time….. But before I can answer this (and firstly Don’t Panic) , perhaps we should dispel some myths:
NEW LAW – not really! GDPR is an extension of the Data Protection Act 1998 and brings into law some aspects currently considered “best practice” – such as “Privacy by Design” (more on this later).
The GDPR becomes law in the UK (and the rest of the European Economic Area) on 25th May 2018. The Information Commissioner’s Office (ICO) hopes that the new Act will be ready at the same time! Together they will form data protection legislation in the UK and beyond Brexit.