After the GDPR dust has settled, my clients divided in three main groups, those who went headless chicken, even going so far as to employ expensive consultants, those who adopted the simple, pragmatic approach (possibly employing me as an inexpensive consultant) and thirdly those who went ostrich.
This article is mainly aimed at that third group.