10 key things in order to comply with GDPR