6 Steps to GDPR Compliance-by-Design