Source: https://www.oscb.org.uk/wp-content/uploads/2019/06/GDPR_Remember-002.pdf