Unlocking GDPR Secrets Every Author Must Know Before Publishing
From what I can see, the very first step is to get a good solid Privacy Policy.
In the old days, people put a one-line statement on their e-mail signup form that said something along the lines of “I respect your privacy and would never spam you.”
That’s not good enough anymore. You need a Privacy Policy that meets the requirements of the GDPR, using the correct language. I strongly, strongly, strongly recommend getting one written by lawyers who actually know all the regulations and can keep things up to date as the laws change. Because it’s a good bet that the laws are going to continue to change over the next few years.


