General Data Protection Regulation comes into effect in May 2018. Is your school ready? Iain Bradley from the DfE explains how you can review and improve your handling of personal data.