The UK’s data protection regime that came about following the introduction of the General Data Protection Regulation (GDPR), and the subsequent new Data Protection Act (DPA), is around five years old now. However, the government is introducing legislation, via the Data Protection and Digital Information Bill (DPDI), to reform it.