Make GDPR Your Ally, Not Your Compliance Foe