From 25 May 2018 it is a legal requirement for every organisation (including churches and all charities) to comply with the General Data Protection Regulation.