We have prepared some best practice guidance (see links below) to help staff be compliant with the new GDPR principles: