Working in compliance with data protection regulations (GDPR)