GDPR checkup