The General Data Protection Regulation (GDPR) is a data‑protection law introduced in 2018. It sets rules for how organisations must collect, use, and protect your personal information. Under GDPR, you have rights over your data, including accessing it, correcting it, or asking for it to be deleted.
For more details, you can visit the official guidance on GOV.UK here.