Start working towards compliance now - undertake a cookie audit, document your decisions, and you will have nothing to fear.

Lead by example and make sure people understand that things need to be written down in issues as they happen.

We also place an emphasis on ensuring that conclusions of offline conversations are written down.

After your question is answered, please document the answer so that it can be shared.