Technical and organisational measures under GDPR: a practical guide for UK SMEs If your business handles personal data, you are expected to put in place measures that are appropriate to the risks ...