Getting started on the key steps to EU GDPR compliance