Three and half years ago data legislation in Europe changed with the introduction of General Data Protection Regulation (GDPR). The Data Protection Act 2018 became the UK’s implementation of GDPR and despite our subsequent exit from the EU, GDPR and what it stands for is not going anywhere. In fact, the government recently published a paper: Data: a new direction (click here); outlining potential reforms to ensure that the principles outlined in GDPR are clearer. As the report rightly says ‘data is now one of the most important resources in the world’ and therefore understanding and complying with the legislation is critical, yet despite this research shows that organisations of all sizes and sectors still haven’t quite got to grips [...]