1. Introduction The General Data Protection Regulation (GDPR) is a law which tells organisations what they have to do to keep all the personal information they have about people safe and private.It started in 2018.It is called GDPR for short. In this document, we will use the letters GDPR when we talk about these rules.