We're a development & product company and are currently adapting to GDPR. We compiled some useful tips in this article: https://bugfender.com/blog/how-to-comply

We're a development & product company and are currently adapting to GDPR. We compiled some useful tips in this article: https://bugfender.com/blog/how-to-comply-with-the-gdpr-eu-law/ https://bugfender.com/blog/how-to-comply-with-the-gdpr-eu-la... You must first evaluate which level of compliance you need. For cases where the data is not very sensitive, compliance is a matter of following some simple rules. If the data you're collecting is sensitive, you need to do a risk analysis and decide yourself on the requirements you should follow (which IHMO is bad for both consumers and companies, since they do not have clear rules to follow). If you fall in the "simple" case, you just have to do in summary: - You must guarantee certain rights which might require some changes but are not necessarily too difficult, like allowing to delete data and export it. - You must list the suppliers processing data for you and have a contract with them. Also not very difficult but might require some time and requires your suppliers to also adapt, which might probably be the most difficult step.