Make sure you understand what personal data is, how you should be handling it and the consequences of non-compliance.