The General Data Protection Regulations are here are will be enforced in the UK from May 2018. The GDPR will replace the Data Protection Act.
There are some significant changes to the way data must be handled under the GDPR and organisations should prepare now so they are ready. The penalties for falling foul of the new GDPR are much more significant than under the DP Act.