In this article, more material changes brought about by the GDPR (those likely to have a bigger impact), comments on the likely impact of the proposal on businesses, and suggests action points that businesses can begin to address in the lead-up to the measure coming into force.