Data protection can affect many of your day to day business activities – from what information you collect about individuals, through to sharing personal information with others. In an online world understanding the basics of data protection in order to protect your business is a must. Complying with data protection is as much about understanding the law as having privacy policies, contracts, IT and staff policies and procedures in place. It is also about understanding when it is or isn’t relevant for your organisation. The new General Data Protection Regulation (GDPR) brings with it challenges that mean your organisation also has to adapt. The GDPR now requires by law Privacy by Design, a concept that requires the protection of people’s personal data to be baked into all aspects of your business activities.