Current legislation was no longer enough to protect and govern personal data. In an effort to bring the legislation up to speed with today's technology, GDPR has extended protection to cover a much wider range of personal data and to give businesses a simpler legal environment to operate within.