Years ago, organisations were able to gather information on people more freely.

This changed with the GDPR. There are now many restrictions on how personal information can be collected.

Organisations must abide by the GDPR, or risk a fine.