I'll second Michael's page, he has definitely provided a useful starting point. The law itself is not written for engineers as an audience. Not even for non-sp

I'll second Michael's page, he has definitely provided a useful starting point. The law itself is not written for engineers as an audience. Not even for non-specialist-data-protection-lawyers as an audience. That said, as an engineer, I found a book targeted to non-specialist lawyers to be enormously helpful: Peter Carey's _Data Protection: A Practical Guide to UK and EU Law_: https://www.amazon.com/gp/product/B00VU5XJHK/ref=oh_aui_search_detailpage?ie=UTF8&psc=1 https://www.amazon.com/gp/product/B00VU5XJHK/ref=oh_aui_sear.... It's not cheap, but if understanding GDPR is a professional concern, consider it a resource for explaining the history and motivation for the requirements that Michael extracts. In the wake of the data protection issues we're having here in the US, I would love to have a GDPR-influenced regime. And for small business, it mostly just means- be careful and respectful of people's personal data- which can be done without it being a burden.