Much heat has been generated following the announcement of the changes to the General Data Protection Regulation (GDPR), particularly with the steep increase in fines and onerous obligations for businesses. Yet the new regime gives an opportunity for energy suppliers to improve the public’s perception of how they gather and use personal data. If managed correctly, it could provide the energy industry with an opportunity to buy back consumer trust.