The General Data Protection Regulation (GDPR) comes into force May 25  2018 However  owing to the uncertainties surrounding Brexit many organisations have delayed assessing how they collect  process and use customer data