The Data Protection Act is an Act of Parliament in the UK which was originally passed in 1988. This Act is designed to protect personal data collected from consumers by businesses, laying out laws as to how this data must be stored and who it can be shared with. It was replaced by the General Data Protection Regulations (GDPR) in May 2018.