The ICO recently launched a helpline for SME’s and from the questions asked have compiled a really helpful FAQ guide.
Have a look at https://ico.org.uk/for-organisations/business/guide-to-the-general-data-protection-regulation-gdpr-faqs/
This will help when dealing with the GDPR “experts” that will be trying to make some quick cash on the back of your business needs.
Well done ICO !