In the second of our series on the implications of the Data Protection Act 2018, Owen Sayers, an enterprise architect, privacy and security specialist with thirty years experience in the CJS, explores how the Act fits into the EU’s General Data Protection Regulations [GDPR], which came into effect May 2018.