From 25th May 2018 GDPR came into effect. In the regulations are duties which organisations, such as trade unions, comply with.  Failure to comply could lead to heavy fines. Further information is available by following this link