The good news for consumers is that their concern is shared by legislators in the European Union. The EU General Data Regulation ( GDPR ) is due to come into effect in 2018 , making it the most significant data protection in the European Union since 1995 . Despite this , UK businesses will still need to be ready to adapt the EU GDPR . The new legislation means that penalties and fines associated with non - compliance and for suffering data will be increased . Had this been implemented when TalkTalk had the data breach last year , the company would have had to pay fines of £ 90 m . The legislation also includes a public breach notification clause which will mean businesses have to notify authorities within 24 hours of a discovered breach .
The EU General Data Regulation ( GDPR ) is due to come into effect in 2018 , making it the most significant data protection in the European Union since 1995 . Despite this , UK businesses will still need to be ready to adapt the EU GDPR . The new legislation means that penalties and fines associated with non - compliance and for suffering data will be increased . Had this been implemented when TalkTalk had the data breach last year , the company would have had to pay fines of £ 90 m . The legislation also includes a public breach notification clause which will mean businesses have to notify authorities within 24 hours of a discovered breach .