The GDPR is a new piece of EU legislation that has been working its way through EU parliament for the last two years.