Building a Data Strategy for GDPR Compliance