Ensure business value while being GDPR compliant