Five steps to GDPR compliance: key considerations for customer service teams