This question relates to the EU-wide GDPR legislation coming into law in May 2018.

The General Data Protection Regulation (GDPR) is a far-reaching privacy focussed law for all EU citizens. So it effects everyone in the EU (inc. UK which has committed to the same rules even if/when it leaves the EU), but importantly, it also applies to anyone outside EU storing/processing data on EU citizens.

Overview from UK Information Commissioner's Office