A better understanding what GDPR is about:
Introducing a notion of “accountability”, GDPR is also stating 7 principles. As a company handling personal information, you need to be consistent with those GDPR principles.
- Lawfulness, fairness and transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Data security
- Accountability
You want to know more? Read the article about those core principles of GDPR.