The General Data Protection Regulation (GDPR) will come into force on 25th May 2018, replacing the Data Protection Act 1998. All organisations which hold or process personal data, be this employee information and / or customer details, will be subject to the GDPR. If you have CCTV cameras you also need to comply.

Please see below guidance notes from the Information Commissioners’ Office:

https://ico.org.uk/media/1624219/preparing-for-the-gdpr-12-steps.pdf?dm_i=2Z6R,NXVZ,31Q7WA,2GKTL,1