Practical Steps for GDPR Compliance