The General Data Protection Regulation (GDPR) came into force over a year ago. It affected virtually all UK businesses and changed the form of a large number of commercial contracts. Now that it has been in force for a while, the real impact of the Regulation is beginning to emerge; this includes • the Information Commissioner’s Office’s approach to enforcement and fines • issues with data transfers (and standard contractual wording) • when to report data breaches to the ICO…