https://www.medico-legalsociety.org.uk/uk-gdpr-compliance-statement/