At the core of the regulation are the principles of transparency and accountability. 

This means being clear with individuals about how their personal data is being collected, used and shared. It also means companies taking more responsibility for their own data in terms of quality, quantity, privacy, integrity and provenance. To do this, organisations will have to place the highest standards of data protection at the heart of their business, which makes this a clear, board-level issue.