Don't forget... document and media destruction is a key part of being GDPR compliant. When getting rid of old documents and files make sure you look for an ISO 27001 accredited shredding firm that offers a full audit trail and certificate of destruction. Cross cut shredding and getting your documents shredded on-site will ensure the most compliance as this will significantly reduce the risk of a data breach.
For more info on getting ready for GDPR and data destruction take a look at out blog posts here.