Just over a year since the Data Protection Act 2018 (DPA 2018) set new standards for protecting personal data in accordance with the General Data Protection Regulation