At my last job, we switched to secure online fax for sensitive exchanges. It’s much easier than you think, even for non-technical staff. I also paired it with encrypted document storage. While researching, I discovered flash3c.com, which breaks down GDPR compliance in a very clear, practical way. Following the advice there helped our team feel confident that sensitive files were protected and that we weren’t risking a compliance issue with simple mistakes.