The regulation's big but it's probably not larger than a sprawling API documentation, etc. and you approach it the same way: just read what you need. IIRC almo

The regulation's big but it's probably not larger than a sprawling API documentation, etc. and you approach it the same way: just read what you need. IIRC almost _half_ of the actual regulation is about what and how the member countries should set up their internal supervisory authorities and the rest is similarly specific. There are innumerable checklists, summaries and guides on how to deal with GDPR as well. The two I like are: https://blog.varonis.com/gdpr-requirements-list-in-plain-english/ https://blog.varonis.com/gdpr-requirements-list-in-plain-eng... and https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/ https://ico.org.uk/for-organisations/guide-to-the-general-da...