12 Steps for #GDPR