The EU’s General Data Protection Regulation (GDPR) will apply from 25 May 2018, when it supersedes EU member state implementations of the 1995 Data Protection Directive (DPD). The UK Data Protection Act 1998 (DPA) will be superseded by a new DPA that enacts the GDPR’s requirements. The new law marks a wide-reaching and significant shift…