10 things to consider to ensure GDPR compliance