> There are lots of guides out there designed for humans.

> It's not even remotely okay to use random people's blog posts as a compliance strategy.

Then use the simple, human friendly guide from the body who will be enforcing it in the UK. I did. I thought it was simple.

https://ico.org.uk/for-organisations/guide-to-the-general-da...

Its funny that your being downvoted, but using a random persons blog for legal compliance seems risky.