GDPR is an easy marketing bandwagon, but actual requirements are frequently being mis-reported.
The ICO is publishing a series of blogs to de-bunk the myths and give a simple and clear summary of what’s important. Take a look at www.iconewsblog.org.uk/tag/gdprmyths
Our own view is that an information audit is a great foundation to discover all types of data held, not just that affected by GDPR. Align the findings with policy and you have the beginnings of a programme to regain control of your most valuable asset.