There is no denying that the General Data Protection Regulation (GDPR) marks a great step forward for data protection in the UK and across Europe. But with less than 16 months until it comes into force, it is critical for UK businesses to start preparing now.