The Data Protection Act and the General Data Protection Regulation (GDPR)