-Document all data
-Evaluate your current data governance practices and policies
-Check consent procedures
-Assign a data protection officer (DPO) to monitor and audit all data processing and activities
-Develop a framework of policies and procedures