The General Data Protection Regulation 2016 comes into effect in May 2018, when it supersedes EU member state implementations of the 1995 Data Protection Directive. The UK Data Protection Act 1998 (DPA) will be superseded by a new DPA that enacts the GDPR’s requirements. It grants data subjects a number of new rights, including the right to judicial remedy against organisations that have infringed their rights, and requires organisations to adopt “appropriate technical and organisational measures” to protect personal data. It also introduces mandatory data breach reporting.
To help ensure that our customers are GDPR compliant when the legislation comes into effect, we have introduced check lists detailing the personal information held by themselves, and prompting them to specify the legal bases upon which they are using our products to process personal data
https://www.gov.uk/government/publications/cloud-software-services-and-the-data-protection-act