[d1sxeyes]

The GDPR is actually surprisingly understandable and 'plain English' (obviously, lawyers have their own interpretations of everything).

Key section is probably this one: https://gdpr-info.eu/art-32-gdpr/