GDPR 101: Monitoring & Maintaining Compliance After the Deadline