The Data Protection Act (“DPA”) became law on 25th November 2019. However, over fourteen months later, very few businesses have complied with the requirements of the Act. In fact, it is safe to say that the majority of them are yet to understand the law and the ensuing compliance obligations.