There are eight different provisions within the General Data Protection Regulations (GDPR) which range from increased individual rights of access to personal data, to the obligation to inform people when a data security breach has taken place. Of course, many businesses would have already had data security measures in place that meet all of the requirements of the Data Protection Act (DPA) which dates back to 1998. Since May 2018, GDPR compliance for all organisations has been mandatory.
