Aligning to the EU GDPR