Article from the Information Commissioner's Office (ICO) includes a link to the 12 steps you should be taking now.