GDPR is here: how to keep compliant