All businesses that collect, store or process personal information on living and identifiable people must comply with the Data Protection Act 1998. These resources provide further information on the regulations and the General Data Protection Regulation (GDPR).