How to… survive the GDPR’s strict new data rules