In April 2016, the European Parliament voted to update the EU’s general data protection regulation (GDPR), with organisations in the member states given two years to comply. Two months later, financial services group Close Brothers found 82% of UK SMEs surveyed are not prepared for the new legislation. If the UK stays in the EU, what would GDPR mean for Britain’s small businesses?