In the EU – to which the UK no longer belongs – the sanctity of personal information is fundamental among the rights of human beings and is crystallised as such in the General Data Protection Regulation (GDPR). It is the