The General Data Protection Regulation (EU) 2016/679 (GDPR), will apply from the 25th May 2018 when it supersedes the UK Data Protection Act (1998). GDPR will apply to all EU organisations, whether they are commercial business, charity or public authorities that collect, store or process the personal data of individuals residing in the EU, which will extend to include non EU citizens.