After four years of negotiation, the EU General Data Protection Regulation (GDPR) has finally been agreed. It was given final approval by the European Parliament on Thursday 14 April 2016.  The GDPR will replace existing EU and national data protection legislation.  Companies have a two year transitionary period to comply with the GDPR, which come into force in Spring 2018.