How GDPR changes the rules for research

The General Data Protection Regulation (GDPR) will come into effect in the spring of 2018, replacing the Data Protection Directive 95/46/EC and imposing new obligations on organizations that process the personal data of European Union residents.

https://iapp.org/news/a/how-gdpr-changes-the-rules-for-research/