Most people assume that personal data and security must go hand in hand. Where is your data stored and for how long? And who has access to it? Currently, the Data Protection Act (DPA) ensures careful use of important personal data. As of May 2018, this Act will be replaced by the GDPR, the General Data Protection Regulation.