The General Data Protection Regulation (GDPR) first came into effect in 2018. 

It is an important legal framework that requires businesses to protect personal data and privacy. This regulation is especially important in data-sensitive organisations, such as banks and insurance companies. 

The full GDPR is made up of 99 articles. 

The main aim is to ensure private information stays private and if you store any personal data, all rules and regulations MUST be followed. These regulations have been created to protect sensitive information from getting into the wrong hands.