The EU General Data Protection Regulation (GDPR) will come into force on 25 May 2018. It is a shake up of the existing data protection regime, which was developed by law makers in the mid-1990’s, a time when digital infrastructures and business technologies were considerably less advanced.