A survey of small businesses by the bank Aldermore revealed that two in five small and medium sized firms have not heard of the General Data Protection Regulations (GDPR), EU wide rules which will be adopted by the UK after Brexit and which will leave firms at risk of heavy penalties for non compliance, a duty to report breaches and a right for the customer to be forgotten.