Our summary on GDPR is brief and hopefully of use to you if you are running a business, any business, that uses personal data.
Let's use some case studies to help...
Collecting Telephone Numbers and Contact Details
If you donwload our Step by Step Guide + Checklist you'll see a case study in there for Just Eat. Clearly all the business needs is a contact name, location and phone number to deliver the food to the client. Unfortunately for Just Eat it appears that some of that data found its way into the hands of another business that use dthe data for purposes other than what it was originally intended.
Collecting Email Addresses
We've written a number of these over the years. AN IS Policy (Information Security Policy) basically covers how your data is captured, stored and handled. Who has access and for what reasons.