7 Steps to GDPR Compliance