12 Steps to prepare for GDPR