GDPR, or The General Data Protection Regulation act has been created by the EU to replace the 1995 Data Protection Directive which had failed to keep up with new technology and online behaviour. It aims to give users more control over who has their data and how it is used, reduce the unethical and unauthorised use of personal data for marketing by third parties, and fine any company who dares ignore the regulations.

Companies found to be in breach of GDPR can be fined up to 4% of global turnover, which is a huge slap on the wrist to large companies but has the potential to cripple small enterprises. Even as a small business, you must now put the user’s privacy at the forefront and avoid any unauthorised data collection, whether intentional or not.