Assess your GDPR exposure