ICO (Information Commissioner's Office) has issued a guide which helps us understand what is happening, what is going to change, and what we need to do. 

 

This has to be considered by every company / entity / business who is dealing with personal data or sensitive data. 

 

Please follow the link below to have a good understanding. 

 

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/