The General Data Protection Regulation (GDPR) came into effect on 25 May 2018. The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a regulation by which the European Parliament, the Council of the European Union and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU). GDPR replaces the old Data Protection Act 1998 (DPA). This change in law is driving some significant changes around data protection and how organisations handle personal information, why this information is held and what action we take with such information. Please find below BABA commitment to GDPR and guidance on how we use your data.