All UK and EU businesses are governed by GDPR. This requires organisations to implement policies and procedures that proactively protect an individual’s data. Businesses must prove that they have a legally acceptable reason to process the data and that they are ensuring the data is secure.