What is GDPR? — Official Journal of the European Union

Regulation of the European Parliament and of the council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

The General Data Protection Regulation (GDPR) applies to all organisations that handle European Union citizens’ data.

The regulations give consumers rights over their data, firms have to meet higher standards for processing and keeping data safe.
People have a right to find out what data is being held on them, and to delete that information, unless a firm has a good reason to keep it.
Companies have to get consumers’ explicit consent to use personal information, unless they have a lawful reason not to.
Getting people to give more personal information in exchange for a premium service is not allowed.

Official Journal of the European Union General Data Protection Regulation (GDPR)

GDPR -BBC news Published 25 May 2018