[jonahbenton]

I'll second Michael's page, he has definitely provided a useful starting point.

The law itself is not written for engineers as an audience. Not even for non-specialist-data-protection-lawyers as an audience.

That said, as an engineer, I found a book targeted to non-specialist lawyers to be enormously helpful: Peter Carey's _Data Protection: A Practical Guide to UK and EU Law_: https://www.amazon.com/gp/product/B00VU5XJHK/ref=oh_aui_sear....

It's not cheap, but if understanding GDPR is a professional concern, consider it a resource for explaining the history and motivation for the requirements that Michael extracts.

In the wake of the data protection issues we're having here in the US, I would love to have a GDPR-influenced regime.

And for small business, it mostly just means- be careful and respectful of people's personal data- which can be done without it being a burden.