Yes. As of 25th May 2018, all companies must be GDPR compliant.