The General Data Protection Regulation (GDPR) was adopted on 27th April 2016 and brings all EU member states under a common framework regulating data protection.

By 25th May 2018, each EU member state must implement a local data protection framework that (as a minimum) complies with the master GDPR framework.

The UK Government has appointed the Information Commissioners Office (ICO) as the official body charged with ensuring national compliance with the GDPR.