5 practical steps to implement your GDPR project