The General Data Protection Regulation will come into force throughout the EU, including the UK (despite Brexit) on 25th May 2018. The UK Government is busily preparing for its implementation. GDPR will bring about the greatest change to data protection law in thirty years. Below we have highlighted some of the main considerations for energy and natural resource companies and provided some guidance to aid GDPR compliance. There are only eight months until the GDPR takes effect and organisations should be acting now!