GDPR Compliance “Triage” – Choosing What To Do First