The General Data Protection Regulations (GDPR) 2018 aims to protect the personal data of every citizen.  An individual is given increased rights over the data that an organisation holds on them.  The main points are:

A person can request to see all the details (data) held about them

Consent is needed before the gathering of such data and reasons given for its collection

Individuals can request the deletion of all personal data held by an organisation

Precautions need to be taken by the organisation to protect the personal data once gathered

Sevenhampton Parish Council has an Information and Data Protection Policy which  addresses these issues.