Since the EU General Data Protection Regulation (GDPR) took effect in 2018 – the GDPR was retained in UK law alongside the amended UK Data Protection Act following Brexit – organisations have been required to provide information to individuals about how their personal data is collected and used. The retained version is now referred to as the UK GPDR.