We are now almost four years on since the GDPR was first introduced. At the time, it was cited to be one of the most profound changes to data protection laws globally, holding organisations directly accountable for the information they store, process and share. It was essentially one of the biggest changes we have seen since the 1998 Data Protection Act, and businesses all looked at how they could comply to avoid hefty fines.