The General Data Protection Regulation (GDPR) is an European Union data protection legislation which came into force on 25th May 2018. All businesses in the United Kingdom, who handle personal data, have to comply with the legal framework.