The EU General Data Protection Regulation (“GDPR”) comes into force across the European Union on the 25th May 2018 and brings with it the most significant changes to data protection law in two decades. Based on privacy be design and taking a risk-based approach, the GDPR has been designed to meet the requirements of the digital age.