How to prepare for the new EU General Data Protection Regulation in the Healthcare sector