Keep your employees informed of internal personal data protection processes and policies
Conduct a briefing to inform your employees of the obligations under the GDPR. Ensure that they are aware of any new developments, as well as any existing laws and contracts that may affect the personal data under your organization’s care. More importantly, they should be aware of the internal policies and processes your organization has set in place for the handling of personal data and provide guidance and advice to directors, officers, employees, and, where appropriate, business partners, on complying with the company’s ethics and compliance programme or measures.
Source :
http://www.cmsdistribution.com/steps-general-data-protection-regulation-gdpr/