GDPR is short for General Data Protection Regulation and this acronym is a new EU law that came into effect on 25 May 2018 to replace the current Data Protection Act.It’s the biggest overhaul of data protection legislation for over 25 years, and is introducing new requirements for how organisations must process personal data.The law states that all organisations in the European Union or all organisations processing personal information of the EU citizens must comply with GDPR.