Stream follows the Information Commissioner's Office (ICO) Guide to GDPR and has put policies and processes in place. These are checked regularly to make sure they are correct. All new staff get GDPR training, and existing staff have refresher sessions. Independent audits are also done regularly on the processes. Please note that there are currently no ICO-approved GDPR certification schemes (see here).