The EU general data protection regulation 2016/679 (GDPR) will take effect on May 25 2018.
There are lots of blogs and e-books that have been written around the forthcoming regulation now circulating in the world of recruitment and elsewhere online. Despite having a good understanding of the subject from this and previous businesses we've decided not to try to summarise it.
The regulation is important, so for anyone interested in reading and understanding the actual regulations rather than relying on 3rd party and potentially erroneous opinion they can be found in full here https://gdpr-info.eu/
Note: This link is not direct from Brussels, they do not deliver an easy readable text for the 99 articles and 173 recitals.
Although it's a couple of hours effort, it's worth it as it will give you the confidence to discuss the matter in detail without depending on someone else's interpretation.
However legal interpretation is everything so I would suggest that if you are concerned once you have read the regulation in full yourself then consult your legal advisor on the areas you feel may be applicable to your business.
Enjoy ; )