With the General Data Protection Regulation (GDPR) being introduced in May 2018, Ian Smith, finance director and GM at Invu, advises businesses to establish compliance as a collective responsibility and a key part of company culture, rather than an obligation