As at the date of publishing this blog, there are just 31 working days to go until the General Data Protection Regulation comes into force. We know it's coming, in fact, everyone seems to be talking about it, but what must an organisation do to adhere to the Regulation, to demonstrate compliance and avoid hefty fines?