The ICO has published a very helpful overview of some key steps you can take to prepare for the introduction of the GDPR in May 2018. They include thinking about how you gain consent from individuals to use their data and updating your privacy notice.