GDPR is the General Data Protection regulation passed in the EU, that is effective in all EU and EEA countries. The UK has also made it into UK law, called UK GDPR. During the transition period, DPA (Data Protection Act 2018) will regulate data protection in the UK. GDPR set the highest standard globally in personal data protection and any individual, whose private data was compromised, can bring a claim for compensation.