The Dos and Don’ts of Data Protection Compliance