What does your company have to do to prepare for the GDPR regulation?

ICO, and independent data protection organisation in the UK specified 12 areas where a company needs to take steps to prepare for the new regulation:

1. Awareness, 2. Information you hold, 3. Communicating privacy information, 4. Individuals’ rights, 5. Subject access requests, 6. Legal basis for processing personal data, 7. Consent, 8. Children, 9. Data breaches, 10. Data protection by design and data protection impact assessments, 11. Data protection officers.