The General Data Protection Regulation 2018, is an update on the Data Protection Act 1998. Whilst this is an EU regulation it will still apply once we leave the EU. Looking at our current processes we cover the majority of the new requirements already. The main changes that affect U3As are the requirements relating to consent and accountability. U3As will need to gain consent from their members to obtain, retain and use their personal information. U3As will also need to evidence how we are complying with the principles of data protection which includes evidencing that members provided consent. Our Membership Form has been modifed to reflect this and below are links to two new policy documents.