On 25th May 2018 new regulations in EU law came into place relating to data protection and privacy. Commonly referred to as GDPR the regulation has many implications for businesses who collect and process information on individuals and as such businesses have to ensure that processes are in place in order to comply. Failure to do can lead to potential fines and penalties.