General Data Protection Regulation, or GDPR as it has become known, is a data protection framework which was designed to harmonise data privacy laws across Europe.
If you process data about individuals in the context of selling goods or services to citizens in other EU countries then you will need to comply with the GDPR.
GDPR does not come into effect until May 2018, so you have some time to prepare. Companies in the UK are asking about how BREXIT affects this requirement? Our view is that following best practice does not harm, in any case if you deal with non-UK, EU citizens you will need to comply. The UK Government has indicated that they will introduce similar rules anyway.