GDPR + Customer Identity: The Journey to Compliance