There are at least three considerations shaping the human impact of GDPR – tone at the top, execution in the middle, and employee and contractor implications at the other end.
https://www.accountancyage.com/2018/05/10/gdpr-dont-forget-the-human-touch