GDPR: Key points to remember