GDPR – new legislation came into force from 25th May 2018