The new data protection laws known as GDPR come in law on 25th May 2018.
The new regulations are much stronger than the data protection act they replace and penalties for none compliance are severe.
For more information and to get started in aligning with the new law see:
https://www.charitydigitalnews.co.uk/2017/11/14/guiding-charities-through-gdpr-compliance/