Is your new business GDPR compliant? The General Data Protection Regulation (GDPR) became law in Europe in May 2018 and requires brands to protect all data – such as customer lists, contact email addresses, staff records and document evidence of compliance – failure to put processes in place to do this can result in big fines.