On 13 September 2017, the Data Protection Act was introduced in the House of Commons. The Act implements the EU General Data Protection Regulation (GDPR) in the UK. In particular, the Act requires entities holding and processing personal data to fol…