The GDPR is a European wide law that aims to prevent security breaches and protect the data of all subjects.
The GDPR come into effect on the 25th of May 2018 and has infact been in UK law since April 2016 allowing for a transitional period from the Current DPA which has been in place since 1996.