Hi there - I work for a small charity and although I know roughly about GDPR, I was wondering if someone could explain what exactly it means in reality for charities... what do we need to be doing? And how big a job is it?