ensure compliance to gdpr