[pbhjpbhj]

I don't buy it -- GDPR is about protection of PII. Don't collect it, you're done.

OK, slightly flippant might take half an afternoon of training for all staff.

https://gdpr.eu/checklist/