The deadline to have protocols in place for the new rules is May 25. Any business “collecting, processing, using and storing personal data that originated in the EU” must comply with GDPR.
The Information Commissioner’s Office of the UK posted a PDF showing 12 steps to help prepare for the deadline.