The GDPR is a piece of EU legislation, which will overhaul our current data protection legislation. It aims to strengthen and unify data protection for all EU individuals.
It brings with it further obligations for organisations (like your credit union) who process your personal data in order that your personal data is fully respected. Processing is basically doing anything with, even storing, your personal data. A GDPR leaflet is available here