There are seven key areas organisations should review to ensure compliance with the General Data Protection Regulation, and even though the deadline is less than four months away, it is still not too late to start
https://www.computerweekly.com/opinion/3-2-1-GDPR-How-to-be-prepared-on-25-May