After years of discussion, debate, lobbying and lamenting, we are now twelve months from the date the European Union’s General Data Protection Regulation (GDPR) takes effect. The GDPR replaces the EU’s Directive 95/46/EC, which has provided data protection guidance in the EU since 1995.