GDPR staff training 12/17 – why provide information on data processing?