GDPR is coming and there’s no avoiding it