GDPR, which is short for the General Data Protection Regulation, is a new law which affects how the data of EU citizens is kept. It's the biggest shake-up in legislation since the Data Protection Act of 1998, and comes into play from on May 25, 2018.