The EU’s General Data Protection Regulation (GDPR) comes into effect in May 2018. It introduces a new set of requirements for all organisations who manage and hold personal data about people located in the EU.