Driving GDPR Compliance From The Inside Out