On 25 May 2018 a massive change in the way companies and organisations must handle data, and the rights that individuals have, came into force. This new regulation is called the General Data Protection Regulation (GDPR) and is applicable across the EU.
In the UK, those regulations will be incorporated into the Data Protection Act 2018. It builds on the current Data Protection Act 1998 (DPA) and will strengthen the legislation, giving you more rights and protections.