On 25 May 2018, the General Data Protection Regulation will usher in a new, more stringent regulatory environment for all employers. Dom Holmes and Rachel Ashwood look at the forthcoming changes, with a specific focus on what it means for HR practitioners. They discuss new rights and safeguards for employees in relation to their personal data, how to handle subject access requests and practical tips on how HR practitioners should start their GDPR compliance project.