The General Data Protection Regulation (GDPR) which comes into effect on 25 May 2018 introduces changes to the information that an organisation must provide to individuals relating to how it uses and stores personal data.