As you begin to deal with the GDPR, the Data Protection Impact Assessment is going to be a process that you go through again and again. Watch this video to understand why.
Links from the video:
EU Smart Grid Task Force Guidelines
UK Information Commission Office Code of Practice
Data Protection Working Party