Now that the GDPR deadline is behind us, I expect our inboxes are all breathing a small sigh of relief.  A big change in emphasis (compared to before) is the focus on individuals as the owner of their data. In reviewing our membership and policies, we found that there was not much for HVA to do in the very short term, however, we have made some small changes to published privacy policies (on our website), and will be continuing to review our data, policies, and procedures.
As practicing artists and small business owners you may also have reviewed your own data and privacy policies in recent months.  GDPR applies to all of us, so we recommend you take a look at and make sure you are up to date. 
There is a huge amount of information about GDPR, but a starting point might be here: