Protection Regulation (GDPR). The GDPR, set to go live in May 2018, outlines new measures that businesses must take in order to lawfully hold the data of EU citizens. In essence businesses need to ensure consent is obtained for all data held as well as implementing internal processes to guarantee that data is protected.