Companies could be fined up to 4% of global turnover or €20m if they fail to comply with the EU General Data Protection Regulation (GDPR), which was passed last week and has a two-year transition period. The Regulation governs the way organisations collect, transfer and store personal data of EU customers. For example, they must record how they obtained consent and for how long it remains valid. Ardi Kolah, co-programme director at Henley Business School, warns: “Firms will now face a raft of guidance from the Information Commissioner’s Office. “