How Companies Are Responding to the GDPR – and How You Can Follow Their Leads