Recommendation: data protection compliance

Our Data Protection as a Service is a good option here: they would be able to assess this for you, and advise you how to become compliant if you are not currently.