Just to add a link to JISC's online briefing about GDPR.
https://www.jisc.ac.uk/training/moving-toward-GDPR
It's a hour long, but well worth watching.
Security and privacy
EU General Data Protection Regulation (GDPR) compliance
This discussion has been locked so you can no longer reply to it.