The Privacy and Electronic Communications Regulations (EU Directive) Regulations 2003 (PECR) has been updated a number of times over the last few years. The latest set of changes came into effect on 17 December 2018.
The latest amendments lets the ICO impose fines on officers and not just the company/credit union in certain circumstances. It is important you have an appropriate basis under GDPR for marketing communications so you dont fall foul of the new rules.
The PECR is in the process of being replaced with new EU e-privacy regulations (ePR). As previously reported the new regulations were due to come into force at the same time as GDPR but have been delayed and are now expected to come into force in 2019. These changes will be more significant and will cover the need for consent for electronic marketing and changes to the cookie rules for websites.