If your organization holds or processes personal data on individuals, EU Data Protection law provides these people (data subjects) with certain rights. Until recently these rights were codified under an EU Directive, which was then
transposed into the national laws of each member state. This EU Directive has now been superseded by the General Data Protection Regulation (GDPR), published in May 2016 and due to come into effect from May 2018.
