Everyone who deals with personal data has to be compliant with the General Data Protection Regulation (GDPR) by 25 May 2018. There is a lot to do and it’s difficult to know where to start. In