GDPR

The GDPR is the European Union's data protection law, with a closely aligned UK version, governing how organisations collect, store and use personal data about people in those markets. For marketing teams it sets the working rules: each use of data needs a lawful basis, individuals can ask what you hold and ask you to erase it, and consent must be demonstrable. Most of the day-to-day effort is record-keeping — list provenance, retention limits and documented purposes.