The General Data Protection Regulation (GDPR) has generated a huge volume of writing, some legislation, but mostly attempts to provide “guidelines” or “checklists” attempting to help us figure out what it means and what we have to do about it.
Much is incomprehensible, if only because of the volume on verbiage!
However one of the most succinct summaries I’ve come across so far is this one from Conversant Media
It is their own policy document, and focusses on Online Marketing, but it is short, to the point and follows a logical progression.
I commend it to any small business management team trying to get to grips with GDPR.