The General Data Protection Regulation (GDPR) is serious stuff, as any risk manager worth their salt will know. But with something this big, there is no point only a minority being aware of the drill.
So, does more need to be done to get the message...