Data protection law in the UK changed in May 2018. It is called the General Data Protection Regulation (GDPR).
The new regulation is about protecting people in the modern information age. It gave more control to individuals and more responsibilities to organisations which collect and hold your data.