GDPR: four letters that have given senior partners in law firms sleepless nights. But it need not be like this if a measured approach is taken towards planning for GDPR compliance. As countless articles published over the last eighteen months have highlighted, GDPR, the General Data Protection Regulation, is the new force to be reckoned with. It promises to transform data protection from an issue that is ordinarily the exclusive preserve of law firm IT departments (and risk