Data protection is now governed by the EU General Data Protection Regulation (EU GDPR) under Data Protection Act 2018 which took effect on 25 May 2018 and received Royal Assent on 23 May 2018. Since Brexit, the UK has adopted the EU GDPR into domestic law, referred to as the UK GDPR (Retained law). Data Protection law is the regulation over the access to and use of personal data which is collected, processed, and stored by automated means or in a structured filing system. When operating your business, it is crucial to make sure you comply with the data protection regulation because a violation could result in a sizable fine.