It applies to everyone that collects data, whether shared or not. So it applies to all you lot as no doubt you collect names and addresses at a minimum. GDPR has been my baby at the school since returning, I’m very well versed in it, and if anyone needs any advice just drop me a message. One thing though, it’s not a load of -------s - I appreciate why it seems that way, but it is long overdue. Just look at the recent news about FB, that should highlight the need for this overhaul.