On 25th May 2018, a new European Union privacy regulation was brought into effect with broad reaching implications for all organisations. The regulation, named the General Data Protection Regulation (GDPR), set a new bar for privacy rights, security, and compliance.