This is a must read guide for those with data protection responsibility. The new GDPR guidance replaces the ICO’s previously published Overview of the GDPR.New GDPR guidance to help health and care organisations comply with its requirements http://www.health-and-care-update.co.uk/2017/12/new-gdpr-guidance-to-help-health-and-care-organisations-comply-with-its-requirements.html
https://ico.org.uk/media/1624219/preparing-for-the-gdpr-12-steps.pdf
You can find further blogs and guidance from Mills and Reeve here