GDPR: Tactical Steps You Must Take to Ensure Compliance