The General Data Protection Regulation (GDPR) is a new EU law that will come into effect on 25 May 2018. It will replace the current Data Protection Act 1998 and the changes will remain in place even after the UK leaves the EU in 2019. GDPR will give individuals greater control over their own personal data.