The U.K. Information Commissioner's Office offers guidance on the lawful bases for processing personal information under the EU General Data Protection Regulation.
ICO guidance: Lawful basis for processing under the GDPR
ICO guidance on data minimization
This guidance from the U.K. Information Commissioner's Office includes an overview of the data minimization principle, a checklist to ensure your organization is doing data minimization right and examples of proper practices....
Data protection officers: ICO guidance
This page from the U.K. Information Commissioner's Office provides guidance on what a data protection officer is, what tasks they undertake and whether a company needs to appoint one....