In May 2018, the EU’s General Data Protection Regulation (GDPR) and the UK’s Data Protection Act 2018 came into force. Embedded in the EU Digital Single Market Strategy, the GDPR regulates the handling of personal data of individuals (so-called data subjects) by e.g. companies or other entities engaged in economic...