Probably the most important part of GDPR is the fact you must prove you're doing reasonable efforts to comply. In my company we've setup an internal redmine pr

Probably the most important part of GDPR is the fact you must prove you're doing reasonable efforts to comply. In my company we've setup an internal redmine project that tracks and has pointers to all development and administrative work related to data protection. We also upload there a copy of the final documents we produce to have it everything in one place. Why? In case of inspection, you cannot fake 2-3 years of work in a few hours.