GDPR: Six Steps to Get Ready