Universities and colleges are having to adapt their policies and processes to meet the requirements of the EU General Data Protection Regulation (GDPR).