This document is intended as an overview of the General Data Protection Regulations only.  Please refer to the main ICO guidance for in depth coverage:

Productions will be extremely likely to be managing the personal data of individuals, therefore the GDPR will apply to the production.

If an organisation does not comply the consequences are serious (e.g. fine of up to EUR 20 million).  It is therefore crucial that reasonable data protection measures are implemented to protect the personal data being processed against loss or misuse.  Companies should set up data protection policies and data breach processes.

Useful information for companies prior to the go live date can be found on the following links:

GDPR: 12 steps to take now