How to demonstrate you’re ready for GDPR