Changes to Data Protection Law in 2018 – preparing for GDPR