The General Data Protection Regulation (GDPR) took effect in the UK on 25 May 2018. It replaces the existing law on data protection (the Data Protection Act 1998) and gives individuals more rights and protection in how their personal data is used by organisations. Parishes must comply with its requirements, just like any other charity or organisation. 

    Further information is available here (Diocese of Oxford website)