Creating a GDPR Compliance Framework