This Practice Note, written in partnership with Patrick Elliot at Keystone Law, considers the requirements of the UK General Data Protection Regulation and looks at the practical considerations for insolvency professionals, and in particular for office-holders taking insolvency appointments where they have to control or process data. It considers what they need to look out for and what measures they can put in place to avoid the risk of penalties for non compliance.