Meeting the new GDPR requirements