In reply to CreateIT.

Well, it requires much more to be compliant. I've just found this interview with a lawyer: https://www.digitalmarketer.com/gdpr-summary/