In the human sense, the General Data Protection Regulation effective in the UK from May 25 th 2018 applies to ‘Data Processors,’ ‘Sub-Processors’ and ‘Data Controllers.’ It is these parties that need to read my five fundamentals for GDPR-compliance. But who are these parties, ‘on the ground’? Are they you, an IT contractor?