We know that data protection can be boring and time consuming for a lot of people but doing nothing is not an option. This is because under the new GDPR the Data Protection Authorities have more robust powers for tackling non-compliance.
Under the GDPR, some things change, but not everything. In general, the GDPR builds on existing principles and adds tighter obligations and restrictions on businesses.