I don't wish to add to our already voluminous list of documents folks, but the UK Information Commissioner's Office has done a rather nice summary of the Data Protection Regulation which as you may have noted is over 400 pages.  https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/.

Possibly helpful for those interested in this development and how it applies to our topic.

Stephanie Perrin