The General Data Protection Regulation (GDPR) will be implemented in the UK in May 2018 and replaces the DPA 1998.