Regulation (EU) 2016/679, the General Data Protection Regulation (the GDPR) was enacted on 27 April 2016 but only came into force on 25 May 2018 as per Article 99 of Regulation (EU) 2016/679, GDPR. Prior to 25 May 2018, the Data Protection Act 1998 (DPA 1998) governed the processing of personal data in the UK. DPA 1998 incorporated provisions of Directive 95/46/EC (the Data Protection Directive) (now repealed by the GDPR) into UK law. On 25 May 2018, the GDPR became directly applicable in all EU Member States (including the UK). In the UK, the Data Protection Act 2018 (DPA 2018), which received Royal Assent on 23 May 2018, made a number of detailed provisions relating to how the