The European Union’s (EU) General Data Protection Regulation (GDPR) – the most significant overhaul of Europe’s data protection laws in recent memory – will come into force on 25 May 2018. From that date, any organisation to which the GDPR applies will need to ensure that all of its relevant data processing practices (including those ongoing under pre-existing arrangements) are compliant with its provisions.