Carl Taylor and I listened to a presentation on GDPR given by Dave Froggett at NSRA Shooting Council last Saturday (24/3/18). Any County/Club that holds "personal data" eg names, addresses, emails, telephone numbers etc of members MUST comply with GDPR by 25 May 2018 - there are no exceptions.
The NSRA will be issuing guidance and a template privacy policy to clubs in the next week or so so keep an eye on their website - NSRA GDPR news