I advise you to review your privacy and data security processes and policies to ensure compliance.
As a data controller, you bear the primary responsibility to ensure that your data processing is compliant with the EU data protection law.
The following are some additional aspects to consider when getting ready for the GDPR:
Everything you need to answer all your questions about how we collect, store and protect data.