Keep calm and prepare for GDPR