Gearing up for the General Data Protection Regulation