As the race to comply with the new EU General Data Protection Regulation begins, Ardington Archives LLP highlights the risks facing mid-market companies without adequate retention policies in place.