The General Data Protection Regulations (GDPR) replaced the Data Protection Act 1998 in 2018. GDPR sets out requirements for how organisations will need to handle personal data. It also introduces new individual rights relating to personal data, such as the right to the erasure or the right to the rectification of data. 

More information regarding GDPR and what is means can be found by heading to the website below.

https://ico.org.uk/for-organisations/in-your-sector/education/education-gdpr-faqs/